7109fd4584037dac8ba8b086ae5567845afdf265b8a76acb068322895124ed4f

Analysis

max time kernel
175s
max time network
173s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
24-05-2024 01:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

rootv.apk
Size

8.0MB
MD5

fe13df0de6c7c98a98f4f977f3e57d97
SHA1

02fd0c76727540f3553885a07f4d3acf4e2b64d8
SHA256

41c3b603e31fb9da5203f5223aa64692bfddfe96a1f3ce3e00227257e22d85d8
SHA512

5298cbd0bffaa0c56e7445c1af13b9d9e7cf50c6728846faae05674ece185157f9cea783c67fbba55b45183a0a931a52d01bacfafce58c548db4cb842e6b745d
SSDEEP

196608:DYRIxUAA4fqrUOqRwUA7pjn9swhTq7VzGdGtdO2VWflQxfFTjne0mzIWfkifO5:DXPAwwvj9Dh+7OYjVAlQxfFT1mFO5

Score

8^/10

banker discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

T1418.001
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

com.baidu.rootv:remote

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground com.baidu.rootv:remote

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	com.baidu.rootv:remote

Queries information about running processes on the device 1 TTPs 19 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

T1424

Processes:

com.baidu.rootv:daemoncom.baidu.rootvcom.baidu.rootv:daemoncom.baidu.rootv:daemoncom.baidu.rootv:daemoncom.baidu.rootv:daemoncom.baidu.rootv:remotecom.baidu.rootv:daemoncom.baidu.rootv:daemoncom.baidu.rootv:remotecom.baidu.rootv:daemoncom.baidu.rootv:remotecom.baidu.rootv:remotecom.baidu.rootv:daemoncom.baidu.rootv:daemoncom.baidu.rootv:daemoncom.baidu.rootv:daemoncom.baidu.rootv:remotecom.baidu.rootv:daemon

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:remote
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:remote
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:remote
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:remote
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:remote
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.rootv:daemon

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

T1421

Processes:

com.baidu.rootv

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.baidu.rootv
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
discovery

T1421

Processes:

com.baidu.rootv

description ioc process

Framework service call android.net.wifi.IWifiManager.getScanResults com.baidu.rootv

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.baidu.rootv

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.baidu.rootv

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 4 IoCs

persistence

T1624.001

Processes:

com.baidu.rootv:remotecom.baidu.rootvcom.baidu.rootv:remotecom.baidu.rootv:remote

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.baidu.rootv:remote
Framework service call	android.app.IActivityManager.registerReceiver	com.baidu.rootv
Framework service call	android.app.IActivityManager.registerReceiver	com.baidu.rootv:remote
Framework service call	android.app.IActivityManager.registerReceiver	com.baidu.rootv:remote

Checks if the internet connection is available 1 TTPs 5 IoCs

discovery

T1421

Processes:

com.baidu.rootv:remotecom.baidu.rootv:remotecom.baidu.rootv:remotecom.baidu.rootv:remotecom.baidu.rootv

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.baidu.rootv:remote
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.baidu.rootv:remote
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.baidu.rootv:remote
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.baidu.rootv:remote
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.baidu.rootv

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

T1471

Processes:

com.baidu.rootv

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.baidu.rootv

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.baidu.rootv

com.baidu.rootv
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4314

chmod 700 /data/user/0/com.baidu.rootv/app_bin/daemon
2⤵
PID:4353

/system/bin/sh /system/bin/pm list packages -f
2⤵
PID:4626

cmd package list packages -f
3⤵
PID:4643

com.baidu.rootv:remote
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:4444

/system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.baidu.rootv/app_bin/daemon mars_d -p com.baidu.rootv -s com.baidu.rootv.deamon.DaemonService -p1r 45 -p1w 46 -p2r 47 -p2w 48
2⤵
PID:4576

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:4726

com.baidu.rootv:remote
1⤵
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:4756

/system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.baidu.rootv/app_bin/daemon mars_d -p com.baidu.rootv -s com.baidu.rootv.deamon.DaemonService -p1r 47 -p1w 48 -p2r 49 -p2w 50
2⤵
PID:4791

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:4886

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:4946

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:4975

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:5045

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:5073

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:5106

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:5167

com.baidu.rootv:remote
1⤵
- Queries information about running processes on the device
- Checks if the internet connection is available
PID:5203

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:5239

com.baidu.rootv:remote
1⤵
- Queries information about running processes on the device
PID:5296

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:5365

com.baidu.rootv:remote
1⤵
- Makes use of the framework's foreground persistence service
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5393

/system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.baidu.rootv/app_bin/daemon mars_d -p com.baidu.rootv -s com.baidu.rootv.deamon.DaemonService -p1r 45 -p1w 46 -p2r 47 -p2w 48
2⤵
PID:5426

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:5511

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:5541

com.baidu.rootv:daemon
1⤵
- Queries information about running processes on the device
PID:5570

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.baidu.rootv/app_avpSdkDir/init.tgs
Filesize
94KB

MD5
501a43586a6188b2095e8d6e2244c29b

SHA1
fa633dba469b0788cce431e4e0a386aea0a31551

SHA256
9ac1936897aa9cf041372e8dd7dfd2b2edba00e2a20f5609209c0351e2080c2a

SHA512
02cc8e1f847c6613b78e3a0060c18e2ee7920d2f4c3d7128cdf199e2c7965017b8c4077dcf68125d5a79fcb2ed6715fe34c093cf9ba2c7ef587a679bbb2b39e7

Download Submit
/data/data/com.baidu.rootv/app_avpSdkDir/libacs.so
Filesize
45KB

MD5
b1e540e32cceb102fdf969846e1e36ad

SHA1
080116782e763f9c4e6e62a3f4f0dad7f92c3de7

SHA256
23e11d6b152fb4444e357e8b9fa7871b4791ed4a43b311a47799743ac0f19974

SHA512
7b350d8970706bc796b46dc86215f58333bf7b0335c29f729f12d0018348335c870ef5dc8492ca22cf2632b2b431e5c35a9537a3b17a32b81d719b1ee3d85d53

Download Submit
/data/data/com.baidu.rootv/app_avpSdkDir/libacs_sdk.so
Filesize
764KB

MD5
e84fc5afb6132ae248153c3e41b2dad7

SHA1
50d4d227df76149a3d799d3692daf26eda26211c

SHA256
383aa2a31f9e2ec36013c201b6386abe5a2d6d68e88e9579be0ecdb15d54c85f

SHA512
489a5a096ed780fa27bbd6665f393a0e5462ec95fdc41bb5d9ffc5c49ea65b3a4646ef906abc85e4e48810a11b672ec705f9449676a31c9a2c0f81471748257c

Download Submit
/data/data/com.baidu.rootv/app_avpSdkDir/libcork.so
Filesize
29KB

MD5
b4e42fb9f73adc0427fcec25430fdb95

SHA1
5f565a7ba8ad02cdb50f00aa0269a5a73093adf9

SHA256
594dab6f6d7a7c59caee7c371d28f8a0535c86d45f78ff7f559588055402d200

SHA512
523bd03932fc9ad699f340f85d1bf381c9315c54744e29a1b19805267c4ff6313f11e54346e0a621f87872676867e143e5d48b1a7a4213d03c1f52111cb452e0

Download Submit
/data/data/com.baidu.rootv/app_bin/daemon
Filesize
9KB

MD5
004dfaaf3e3b8dfb829f7c1656f6e167

SHA1
1509259c3d928a0f5307234807c5d1cc83586fef

SHA256
3f14ed272686ed33a5e3197dd053d36c4006def65a808d0805185c1ecd1c3c6b

SHA512
e73c3b31d1dfabb16069dde843c62a72c07b7d97b6c313810daa6ffb1ffc0ded5d904bba5a5cd56e348de5cdf08927e0ab5b8fc418aacd970d84ba3066d3998c

Download Submit
/data/data/com.baidu.rootv/cache/local_after_filter_763_1716512752924
Filesize
483B

MD5
c4e5f8baa2d15bc222faeca5a07facf0

SHA1
3020a654833bb9e8e8c691a8a226936957adbf8a

SHA256
7c1d6714481189ee20ab783e59e3b9a203a49b35c6efbd1cacff2b600b7c32c0

SHA512
de1d9bb925a11e5725bea3c2f0634522b03b76fc3d955b10b60e34f5a70709375e799c1fb735f519cbbdfae2d5c7c40d5d7f05489eda008e3d9018c4456c679b

Download Submit
/data/data/com.baidu.rootv/cache/local_before_filter_763_1716512752924
Filesize
481B

MD5
3177d48083368bba32817b5d1168f456

SHA1
36ada6174a89dcc8a95f99bc7733987bcc4e377c

SHA256
d02b21c39a7f5812b6bc5cef48282750ad9c7aefdfa3897bca95558eee430425

SHA512
cf07261cdd998497db9e017b4793ba9fcdbb402c82884366bc40a426bb92859532cfebae93751fe2250f09bc412647cbdac951286cadb1f2030c9b748de29c65

Download Submit
/data/data/com.baidu.rootv/cache/uploadlocalresult
Filesize
361B

MD5
f8529d2d9b86343c4da1bac8b03db5ea

SHA1
897c4583dc936e6feac42efb077ebb20494e850b

SHA256
529998497249e03c832e6296b3605d28b25b90f9d825f60bf9f149fc67176017

SHA512
1cb57e1dc2cdbd4548ee0d2626e3c94b1ad3e217f87997b00e1d4d4d743eaf8832422a863e00888450b0b11d934a8e0c698a6d7aab46c79a7e24fc790c4a759c

Download Submit
/data/data/com.baidu.rootv/databases/apk_white_list.db
Filesize
20KB

MD5
a2ac39eeef9db77ec0c16f0e7536d3cd

SHA1
ac78988ca03a668e1bbff1dc00695d387ca17dac

SHA256
ae20957de90bd54f9d6d793d8a688af1141727a0914754aa178649f6f7ce0bab

SHA512
4a8d75c15035b1a30ef904d87cbdd7589da3fdcc21c6383567b83f6b2a9245c4d989d94bdea192c7544261473462c0b78baf685f256458075dabb57d25232bee

Download Submit
/data/data/com.baidu.rootv/databases/apk_white_list.db-journal
Filesize
512B

MD5
bf8f6450ee6200ee749602b5bcb47e35

SHA1
48d4936828a1c1581572991829821b05cf0ec92f

SHA256
9119b88d2630f13a42ab41b23fa5e2b016fc9731d42ab93224d99fc6ef14fa69

SHA512
2948fa6a9bffd71c3457fc45ba57a98a43b9422219d5627e80ec0f164faf084c30e33b2b34ef232873d14bb1169d32026a0d4dbd7304af4fdf1199fa4a089680

Download Submit
/data/data/com.baidu.rootv/databases/apk_white_list.db-wal
Filesize
32KB

MD5
dfc61ae703fefc5f3b3615ee485261ed

SHA1
8f0674c443aea7d21b419f20c00c2d4296a91cac

SHA256
a23d3dd49ea4765c8e7c0932ddad3a9784a43b5ee71d7ca2c905640d7d968672

SHA512
656648083bd3e67c9b1b4875dfd946822fbbff8840484619f4ee8f169da91b6b1e0e73fba90e5df548b47b8a5fb16e8930688553b42252712732e12a63d084aa

Download Submit
/data/data/com.baidu.rootv/databases/app_control.db
Filesize
20KB

MD5
d06c499cd13bd3a61872ba21f59cece6

SHA1
c552994530476363747534d8440081df2e791ac5

SHA256
97840461becb1b640d115505526b4107d5a358feec187f945ac51a0c76e17a21

SHA512
ec68f7393e373b72043d5f51b69e977edbad5ba205cc350176771f7a8c921dc31cdcab843595b4cedc98758c9cbfb594b2400ba42d13c0e77cf7afd8d71bb916

Download Submit
/data/data/com.baidu.rootv/databases/app_control.db-journal
Filesize
512B

MD5
a85d2d244cbfa8f38316f3dca8c1e2b8

SHA1
f4d4e14cff6c58c24f72fa4132b598465e2cfc09

SHA256
de24db4a44558a6c3ef0267b94905c33e778f246eb06da03202d1fc23d937966

SHA512
6d9dd984f85611bd935679272e1b907e61af7520ec0c2d735e58ca073ad494a52a3849bcdc23985b81a417ccd11469f61ce43c2d02cc04687cc80cf0ba3af640

Download Submit
/data/data/com.baidu.rootv/databases/app_control.db-wal
Filesize
32KB

MD5
1dae8ab5a4d5f3bb397dfa2f7bb1cba6

SHA1
c927e786bac46915f00e12f6c23b0daf2fc24f49

SHA256
30dbed48853fb21a469dcc8a1f19bffbd578ad33c74f3afd9792ecc0eee14f45

SHA512
f2b81b4728cbddac979626beeab1268356cfdb2e2721db1edcb5a030457fbdf8b227ed6473235e6b9936c8fb9cbf51cf7fc3177f244f499adaa95910178390b1

Download Submit
/data/data/com.baidu.rootv/databases/appdata.db
Filesize
298KB

MD5
507c29d11c8ff7affb42b7aee022d3a5

SHA1
6fa06e24936f9ba04c99704f90113c7f3baccca3

SHA256
c29de10353ab83ba51a89f023f3b1ce955134d3ab7979ea5031be38b1e115898

SHA512
0e5c123e009999dd0a3870d8210627ddc9ffd200d2b7b54e7382af166745f29f77ded884d893b951457780d2ed59787dd28f535219a553b00f5f5f5efa990888

Download Submit
/data/data/com.baidu.rootv/databases/appdata.db
Filesize
299KB

MD5
2bf1442b6c420f4535412d9c9c19c241

SHA1
458495c7e73e9e92ad1653a04b3768f1a2e8100b

SHA256
1b27f6e9e15b5aab36f3b3c89589efbe40d296ccb0419a6ab86bfbc4b7f4569a

SHA512
062f336576c6cde9d4b696325cf7460350805bc259b066b2bf024309379f0ac4b1bce63e3d0c44f09aaf0c818f465ca6764de9b10857d997c30a4ed876250432

Download Submit
/data/data/com.baidu.rootv/databases/appdata.db-journal
Filesize
1KB

MD5
81000fb2680eb42d871608c82ec56b42

SHA1
3e58260bcd3d32c8bec72ac140408703a4976a01

SHA256
411772dd5f32b4494f3083a792fcba96c474c7525e9fc3742bc5bb54f6cf8cee

SHA512
3dae7bd29c2ca9dbb86b9e971954ff94e33cb8dd37ca113152ef7fa8a722cf22faf524b6edd0cd3f511831fa42044ff94bcd489666783ec5a8bb0e6763daf852

Download Submit
/data/data/com.baidu.rootv/databases/appdata.db-wal
Filesize
7KB

MD5
98e919ba69d96590dda0a24d28b43e12

SHA1
4aca0441feb88de7c3ba2811e5740e454718ca0a

SHA256
6976c2c9ab336cbef71535bb223840a0830173a82b0b98055fc31c8df007bae4

SHA512
0ca0464d095597de91ae005530e7bfc38d0a8f96bdf520360388a98136f453d1dff4dc3c3c5305729e881043a17b2bab6e3c45590e475fa873536f5d99f95115

Download Submit
/data/data/com.baidu.rootv/databases/baidu_acs_cache.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.baidu.rootv/databases/baidu_acs_cache.db-journal
Filesize
512B

MD5
b4519589a0f60a21c0c25d91d0b28e86

SHA1
8b8764b3276276712173ee9fb1cd0fa119b0c090

SHA256
b89ef5b8f4fe1eec182c50ddf4efe512bf2ceafc5260ab4e7d8e71009bbfc853

SHA512
82e3acfd6975e3e7eee77962e1c0622ec2d59a83cdf1d750ff87f61faa3533c97711f109503d3185357d8a278efd14fdb39608ebda36a7c94f0d3f6eacbab8af

Download Submit
/data/data/com.baidu.rootv/databases/baidu_acs_cache.db-wal
Filesize
52KB

MD5
f52100743cc1f84f6dad327fae7376e6

SHA1
85be138952168b6a1fca4109223a094b105cb07c

SHA256
58a5497cb095b851f43d07091b7710209cf7eea71e30bdb89e293d9d2441c384

SHA512
2f1e4337b7e6a374e96bef037c694269b8ab38ee6a2534f0934bfe2321841ca8739f8741826eda5a18b1b2476e4ebe5a30788821022615c7545e948471b53f1a

Download Submit
/data/data/com.baidu.rootv/databases/baidu_cloud_5infos.db-journal
Filesize
512B

MD5
060b3842ac5ed45ab8bc37d6f9cc2d86

SHA1
9bd38c87135cbe2a47400a35bf5ce9db827fd1ee

SHA256
185260bafa26008e5116807f4a59182feb73722a849d9981d4ad962ee6deb72d

SHA512
7d47dfde6b5605db446a9f8bc2de7f6beea07821a116844c26d735f75b5422e8cc689d6951ca33ebc22d089cb65c1e359d0ca5a1e810fde60cedc1b628375b6a

Download Submit
/data/data/com.baidu.rootv/databases/baidu_cloud_5infos.db-wal
Filesize
40KB

MD5
6451793f0a39ddb837a6ab65db4af5f5

SHA1
7b34cbde2b99e4aa898051a67b7b8f2b8851ad12

SHA256
ec481bd3d4cefe9fe23bfa0cfece662843e261a993521f23f304e01d016209d4

SHA512
0610f7fcef98cbe041b4439148f74327290deead60b126d839a3232a183080cc85675f8a8f6dc362bd6d166b0ab608e7d977c3804715e2aaf19011da53680002

Download Submit
/data/data/com.baidu.rootv/databases/baidu_cloud_cache.db-journal
Filesize
512B

MD5
2d30ba6784fca1a5bd14b3856c4ff88f

SHA1
d34befa3f351de748f64de554a710b28038aecbb

SHA256
4a6c9fbb35c08c4499f18401bd53d702fbd1eb0851b19ab4f58e103274afbf2a

SHA512
557d9898c2f524a101cef1a31cf5169cc8c72a2bfd1faa0d75f94e2130939c5dd21e2f2e5d40e43e6f3ed123ce4e7b7e17596f85d23f9f237338153fe0bef258

Download Submit
/data/data/com.baidu.rootv/databases/baidu_cloud_cache.db-wal
Filesize
36KB

MD5
9516144d28afda9972235c95710c2de5

SHA1
8b74970f5d7e77c446fdbc33286b6e249ebf3795

SHA256
d78f331572a5328da716da4965e47ad3725eb0222e3ceb0a5d46fc4669558c7c

SHA512
9c92505c72dd66223d1c171a66557006e2809aa006210efd9dda4d5f8c94891a1ca6aa22256aa422ceee51fcca4085022a092ade4712c4a50638566532941448

Download Submit
/data/data/com.baidu.rootv/databases/tray.db
Filesize
4KB

MD5
a23651f858e60db701ed3718cf9841ad

SHA1
773e93ad41799c6dade3749ffcaeec3df7b67818

SHA256
6c6f3335237701ad245b99d83e8f92c07c0fec4c8599c25a36fe14c15345f561

SHA512
5e5a041b9044b6eeace2346548714edc2f506feb6fa001ae2075078147e88922791829cf7eb3be29d1500f88838b7bafa7bf5a5ec5471b551bab37f1cc3494b1

Download Submit
/data/data/com.baidu.rootv/databases/tray.db-journal
Filesize
512B

MD5
c41e4ce3f2a19118f69df57f198b7223

SHA1
d943e52059239ad6356e849e59870e2b6039816b

SHA256
7b127a76ebac6f059d636c24ef72e6f73fc90581a9bb4a71534b7f7c57de17f0

SHA512
5b88d367ba0af6c59e73d73dd394e9e83303ec20b6fa2632ed0bf83ad790298033d663d764e83aec5f1ceaccc4436299b61272d1396bc2f080c70deb703e89d9

Download Submit
/data/data/com.baidu.rootv/databases/tray.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.baidu.rootv/databases/tray.db-wal
Filesize
80KB

MD5
324f9e38a7ae654a406e7d9e9aabef3d

SHA1
bf8674e48c74cc589077f1681be6c45b4ca60f30

SHA256
8b609b9fc9a2e82ed39cb8f88a69047c5ded6d0aecf9c56608a98d0a8e8e0904

SHA512
3efcbc5a47e140fb8e22e19bcfd23e19340c7ce29dd320b240efb3f852765204dae8fc6f2f542ece25cc72387d1de5d7d142004f8cfaf6a995c3a2ef816e9903

Download Submit
/data/data/com.baidu.rootv/databases/tvshield_d.db-journal
Filesize
512B

MD5
9244178e05eeebccbed0e0e38859e5f0

SHA1
484eb35e3962dc4106c082d24cd8f9eaefbd997c

SHA256
81fcbfcf841ceb99417ea031c7db49eef848aa324d9596c0e9b3504e248ee5b6

SHA512
feed54ceb10163b8676c1d8ab2b18f0f9bf7d7630cf9fcb99af4957df3e661523d54f6b8c506ef34e637be5f1cb9763abf750760bab85036f5f32f1246e25e9b

Download Submit
/data/data/com.baidu.rootv/databases/tvshield_d.db-wal
Filesize
100KB

MD5
10cce9f126fe8ad0d7a2e8ae9faf6e00

SHA1
57734e8729dbbe4dd755f233a968c96d95287a53

SHA256
c846fc2279e21502f37d4e8b324480a4c8280780c337df4c233df9de0db69e6d

SHA512
4638d1b5775bb2329742c63c5f831f9129deca1b1cb40c7602babc9a5f543103ffeda068b524a4f6ef252ccc866e29e7ef9de920bf0a50461f1d2a5472110f33

Download Submit
/data/data/com.baidu.rootv/files/libcuid.so
Filesize
129B

MD5
9519aef60c286060e0fe896f7b120e36

SHA1
d01b140622974082aa8afa868ceefdc835746e58

SHA256
6fc14d298aa4c5d7ebe0391f94a86cc7983a40889f093c19265f4486d3d2b2cb

SHA512
ad419839f6d1b7f434b43c2ca5c36fe2afb6df3d9d5194cd1552eb751a586aacd121a61d8432222bfe6a42acc77abc8f5bc8d04072f297125b2607f6eacf5801

Download Submit
/storage/emulated/0/AndroidOptimizer/space/.trashscaninfo_4
Filesize
1024B

MD5
e0ee6aae425973fc3f6cce00efb111dc

SHA1
4ea75b5ef5fc94a2e3639ad28cedd6a56889222d

SHA256
72ed7e037adf3e30bb7f8c2dafb5b7e805d5224b13cd218c8b4244b6b7093ba7

SHA512
cda460fcdedfd4129712605285ef152ee30a67dd13a7da6d4fbca6da31a60762d26dbb4309fa0183e612b4b358cb4d5e85e43205836ef56aa5cda09d5093dbcf

Download Submit
/storage/emulated/0/AndroidOptimizer/space/.trashscanreport
Filesize
92B

MD5
5b3718737f295bf29aff83742beec1b7

SHA1
389882421e37999b3153b1da1daeb304de2ac15e

SHA256
668bd3c01218913caaf6785af0f057ee42a8a2da29d24c8f0188342d2ff3827b

SHA512
49b29d7240a8cf11419d8cca97765b3a24c6520b8c7d76d5d836af3a2dae2d7a2f1f5f152042a1a438cce11349ee2626151dbf64a67b63a75696a579ee1043aa

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid
Filesize
89B

MD5
6f42b1426a34171519b6afb1dfcc4fb8

SHA1
2293c5276f8b79c244bbf41f1b82fbe61ea58088

SHA256
e18891294acea56da8d4150e2ac941146ccff56ff78ec71c764a552e04fb58b8

SHA512
0e8c7248b34adde604488808dc16181f7de18e7e576176765b13e29775c2043a9d3152ea12697ebd2ac02288a9dc0ca00099935ef2ad8e29faf75368bc74eb50

Download Submit
/storage/emulated/0/backups/system/.confd
Filesize
20KB

MD5
249e034c9703afc1fd6062371c7f3da8

SHA1
9ca489179488e0fe5a35f7c0d5887f163e4890cd

SHA256
18fc5cf216b05487a87be99a662e7474bd54120f214e034b3179f40ca989352a

SHA512
b819b152548431c7892678ecdf23abe44cbdcf80e8f22707ab32a2aedb5356346b27e3c3e750665ba893d602af1c7dcca97edbac3c820859a0fc20714c22c0bd

Download Submit
/storage/emulated/0/backups/system/.confd
Filesize
24KB

MD5
8c7f6e3b52e6e841b895bbd13644ed43

SHA1
ec8daf46a7eb99c75ea1ce8582ef77b2df8455d2

SHA256
6615188d5d8fa77b44fbae7a249d073b3623316e7489c5fec95fe53188ea467c

SHA512
cffafd628e62fa915872796ee02dd8119cfebd6811291155acd400986ee5d34b244ab3b5d0bd386566724205771f665571bcb04950d390c5c60072fdb90c5280

Download Submit
/storage/emulated/0/backups/system/.confd
Filesize
24KB

MD5
d489a9844e594fd8928824a7b50c74c5

SHA1
3827876e3bda9fc2acb8b06b63f4e3ff281c839c

SHA256
4c4726deb87e8d6f2e9077d7625004c4adeb117e7e3ef9a4278a901541c87f6b

SHA512
8be076a450c3e4edd734f7182b20d821fd8259441bade1a2d1ff134398becfb361ecaf84779917ab353c82766113fc4f1610ca3b36afe13ceac9bde0ac365313

Download Submit
/storage/emulated/0/backups/system/.confd
Filesize
24KB

MD5
bc3b76db343a5668600c2403fe66e1f8

SHA1
a32ad980460f8f418c0a235c464325bd2e93c98a

SHA256
c39f54276be09a795ed01660b2b0fc867afeb1936c953d59a0dd5e722de8a6bf

SHA512
afa5d717f7df22b262a9580454a7c8b21221a287d62bb173dbc00d4a9cf137aab17cea28aab85f84de529cff7a558a4f12ba1c70b977ebb933a648ecc4e32fce

Download Submit
/storage/emulated/0/backups/system/.confd
Filesize
32KB

MD5
355499ce9007eea067420b18c9612f58

SHA1
7e68316d36f70123c4e085354816eb7154511f06

SHA256
6d1dddc6b0842b1b2d5f98e9b4dc83cf2049b54cc280fba5cb6fd117fcf343ba

SHA512
256ab7430da3d04de48462bb079bac552c036f2e3e90025a8ac350a8d6e046d16f1e02057185d63a979eb371e24ad136b72088d6a8771577eb935604e61999c2

Download Submit
/storage/emulated/0/backups/system/.confd-journal
Filesize
512B

MD5
6b7f789ddf5c86833500d0b6b99c9cda

SHA1
4bc53bd21ff59c452500a84aa340e25d7a071010

SHA256
d2690bb419a76846b186359b19c73c75d527ef298df3ba2256ce6f11247c4e37

SHA512
1b714dbec3d623ec0f05af9ff49a00a11d0ac669f895465549742f931d6e789ad2e870db62ad046ff598cf36951afd4e3e9fd2b44233cc1980e3c133be4d4f1b

Download Submit
/storage/emulated/0/backups/system/.confd-wal
Filesize
36KB

MD5
8d409bed7bd142246478e8e7aa66fb44

SHA1
7172a0e9aec756b693c48b160e414976b7ee838b

SHA256
b5e70ac91c68808149f9f2318e5ab43d5ccba292833a2df2aa79a72e70a08455

SHA512
e979562cf27cac0f9490a9a3994c93197e9de235a92cd7085c1c8386c7d70dec0a14919f1fbfe70f1669620b599a5ce1de4115a068cfd36f1a5a3e60064e3535

Download Submit
/storage/emulated/0/backups/system/.confd-wal
Filesize
12KB

MD5
d86294cc0da4f4f3186018105cbcd924

SHA1
710d336f7a08e611e9fd6c05f3f3a75d5657c315

SHA256
c4fb0e84f348079d63d5efb95c92cad8e699f3627ba523198575ad1fd704eeaf

SHA512
62528bfb091791f3418c187460d669ee516aeb5888faab39604d2331439a231e9702d2943e863a5c15cd2dcafe2943db95c62ec910613da0fa0f6d1c5c23cabe

Download Submit
/storage/emulated/0/backups/system/.confd-wal
Filesize
8KB

MD5
2b08bf06d684e61744149f722be75739

SHA1
82b11e0d046655f864c6af1e433744db7e8c9433

SHA256
8de5826e8162937894353fdf0f2adad1d37fa260f5a54334018d8acbb67c117d

SHA512
d58bbddfb660e26842175fc5ce7a34013eecee0bd8f06d7d71f7affa4d058840ccf106e6155752338cefcb5e70f18778d7c00cbbc3332e9fc821c39fd7dae28a

Download Submit
/storage/emulated/0/backups/system/.confd-wal
Filesize
8KB

MD5
f6cf9d0ea9a69854e20a14680577f36e

SHA1
7f38b146082401385699d8fed7f9261a13fe4ee6

SHA256
8cda7ec2d8a2481f7a204b5af6c1e2544e44cd6f73576f169a645f06531dc49b

SHA512
2e7b14392a20d8dc5a6020db7e953e2cf6b676f4aa468a91f352472261ee04121035d37fa039cffca9d8c52f81dab1c19ff866fbc2fab835c81f35ff065122ce

Download Submit
/storage/emulated/0/backups/system/.confd-wal
Filesize
12KB

MD5
4343199601006b774d423794ab831314

SHA1
be13e5e49420518b65413fefea8dca012dfc14be

SHA256
d59e349b54039c7c12f72b269b6ad0f164442a9d1251a7e81761757a058c9246

SHA512
0f290af19056020a5ee3d315ceb3be57cc177640c369d10438e1c2fd2a09a16ee5e6f75b54ed622f1e0feb32b52db0dedb26f231a6744e7844c13f177dec9989

Download Submit
/storage/emulated/0/backups/system/.confd-wal
Filesize
8KB

MD5
4829eb08f7a1de99ca1d423d0ace9975

SHA1
3db1bc950c3fa4bc87241e96ec74f7e03715f655

SHA256
c8611ecb9af2fa30c81b52491a1b89a626af83d2e7e6694760eef27c763ceda0

SHA512
8de646316310daea246e5f4012dafefcf38d729895dce6b5623acefcc98f2db47950d5b9d8aeb1c7ff70edcad5063fa36363b835dc86ed2c974ffbd80b9231dd

Download Submit
/storage/emulated/0/backups/system/.confd-wal
Filesize
12KB

MD5
68447be1a8c323bff6503efdd6b378ab

SHA1
75362075ef4ba6b867248d8361cd15e23a017458

SHA256
b1d0b6641ba1e1fc2702e0d18dc3123e9de908dc730b4d20c7a9385ca204cc3b

SHA512
f8f3b519991c8824221cd158666d2aaaef903412a078844497c08d290d3498e3958ec89334c234201fc0666b8001a96d7a5b7714c9e5b930abe9056d8dbe404c

Download Submit
/storage/emulated/0/backups/system/.confd-wal
Filesize
8KB

MD5
359261801fc3271725c7a79b1f17c7bf

SHA1
1321e40aab0560861f9774ae11dff3e22d8cb5b4

SHA256
9d677797e4f18c1d32876527379342bd2bc28c7ce2816795867d6cc778b952ee

SHA512
252d8a41d5b9b3775a22ea527bd415338c661ce2a594c7f2348245396e5ed07dd236beca8503c400512958f1ae55f06a01ed2992259cd5f252fa4c8035ccc5eb

Download Submit
/storage/emulated/0/backups/system/.timestamp
Filesize
25B

MD5
4a70ecbab0ac47b4ecc4bf6529cc19b1

SHA1
021cec9ffee7549d291ee7684e9c9d6d2d750614

SHA256
0491432e370be47c75efd6dfeb8adfadbe654bc95a8243923c95445846050dad

SHA512
27016c1be8d7cc41130633b4bf5f3d7011dc00095fc76245c9204ce004885f673b590419cdc8f610bdb52988ed0048ebc1c5801b30146708ac5901cc3af4f306

Download Submit
/storage/emulated/0/backups/system/.timestamp
Filesize
55B

MD5
b6891ef216319c21d644309ecf8687e9

SHA1
2900b6066d17eb358713607f76af4846487ad857

SHA256
2f92b1681625210385977896c772e5f519fcd7acc5b4afa553957b1255837b48

SHA512
b760a4e46e4d3acb5eab120432e8c2ccc2acb037068c448208abe45f080542a4dc00c3c11a67558f7d90eddce4ed787e839626cb19d37892d2bfc74b6c2d6aaf

Download Submit
/storage/emulated/0/backups/system/.timestamp
Filesize
84B

MD5
6fb1774e376438a1320dcc409b3984c6

SHA1
8e926977846793ad7a98c469dbcbf4f0994acabb

SHA256
869b1ac5ba51ffb13170b3f7a7cfd766e1d664f93683015ee42a79b357822740

SHA512
4d125995327decd6b1d79f7ac15af35f5aff7e69cd518b6f1bdffdd7fa141bb7a3c78b18747483880b48a44bfa443e0c6e26c3ed06664ac7ec629917082d1d45

Download Submit
/storage/emulated/0/backups/system/.timestamp
Filesize
114B

MD5
628da9dc25407168d64a53d81c40a8a7

SHA1
1106e5ed019f1155e40560d723a714ec533f19f6

SHA256
1188b2450a093312c2de61d6465a0c07e1144a693180eaf66fe8c369fc92ede0

SHA512
d1e4f6042ed959c05746f937d3599f9140d59d9d2a6537589589a497c4e611541ec84b96b076e287012e9bd79265576d4b1b2bd7f3fde3441de14dd10a836666

Download Submit
/storage/emulated/0/backups/system/.timestamp
Filesize
138B

MD5
ee22b1f1b0fa86ec769bfbbe5cb5d677

SHA1
3740be20a7ceecda42af6cb487e9e53fb3e22ab5

SHA256
2738ca6e5861a61b393dc2e15f646310de63252eb6494f88c1acd1b8e71c132d

SHA512
d340793608472da04d27069075d338a064f4c51ac6c423dda3d92f8d93c00fc063a6867aed8ddc870985784c4464e15ad478a2407e455744f26ee971af187fc2

Download Submit