JaffaCakes118_d65343874d6e9de7e40dc495594ed0ef
- SHA256 469b3ac4ca633139f43b33a7d2761e354288b68dfac4165dad16915733da2c8c
Overview
overview
10Static
static
10Root·�...pi.dll
windows7-x64
3Root·�...pi.dll
windows10-2004-x64
8Root·�...pi.dll
windows7-x64
3Root·�...pi.dll
windows10-2004-x64
8Root·�...7).apk
android-9-x86
CallMaster...on.apk
android-9-x86
1CallMaster...on.apk
android-10-x64
1CallMaster...on.apk
android-11-x64
1Root·�...er.apk
android-9-x86
Root·�...er.apk
android-10-x64
Root·�...er.apk
android-11-x64
Root·�...er.apk
android-9-x86
Root·�...er.apk
android-10-x64
Root·�...er.apk
android-11-x64
Root·�...te.apk
android-9-x86
Root·�...te.apk
android-10-x64
Root·�...te.apk
android-11-x64
Root·�...sh.dll
windows7-x64
3Root·�...sh.dll
windows10-2004-x64
8Root·�...��/adb
ubuntu-24.04-amd64
Root·�...db.exe
windows7-x64
3Root·�...db.exe
windows10-2004-x64
8Root·�...18.apk
android-9-x86
Root·�...18.apk
android-10-x64
Root·�...18.apk
android-11-x64
Root·�..._1.apk
android-9-x86
Root·�...ot.apk
android-9-x86
Root·�...ot.apk
android-10-x64
Root·�...ot.apk
android-11-x64
Root·/su
debian-9-armhf
Root·�...99.apk
android-9-x86
qqwebdisk8.apk
android-9-x86
1Behavioral task
behavioral1
Sample
Root·/AdbWinApi.dll
Resource
win7-20250207-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Root·/AdbWinApi.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Root·/AdbWinUsbApi.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Root·/AdbWinUsbApi.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral5
Sample
Root·/CallMaster_V4.1.2.26_Android_pf145_bi800_(Build12073017).apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
CallMasterNotification.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
CallMasterNotification.apk
Resource
android-x64-20240624-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
CallMasterNotification.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Root·/RootExplorer.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Root·/RootExplorer.apk
Resource
android-x64-20240624-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Root·/RootExplorer.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Root·/Superuser.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Root·/Superuser.apk
Resource
android-x64-20240624-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Root·/Superuser.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Root·/SuperuserElite.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Root·/SuperuserElite.apk
Resource
android-x64-20240624-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Root·/SuperuserElite.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Root·/USBFlash.dll
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral19
Sample
Root·/USBFlash.dll
Resource
win10v2004-20250207-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral20
Sample
Root·/adb
Resource
ubuntu2404-amd64-20240523-en
ubuntu-24.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
Root·/adb.exe
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
Root·/adb.exe
Resource
win10v2004-20250207-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
Root·/kBatteryDoctor_2.9_2000290_14824_20120914_125957_40000018_40000018.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Root·/kBatteryDoctor_2.9_2000290_14824_20120914_125957_40000018_40000018.apk
Resource
android-x64-20240624-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Root·/kBatteryDoctor_2.9_2000290_14824_20120914_125957_40000018_40000018.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
Root·/oupeng-1_1785_1785111_15_1.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
Root·/qixiazi_root.apk
Resource
android-x86-arm-20240910-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
Root·/qixiazi_root.apk
Resource
android-x64-20240624-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
Root·/qixiazi_root.apk
Resource
android-x64-arm64-20240624-en
android-11-x64
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
Root·/su
Resource
debian9-armhf-20240729-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Root·/tencentmobilemanager3.8.5_android_build0599.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
qqwebdisk8.apk
Resource
android-x86-arm-20240624-en
android-9-x86
0 signatures
150 seconds
Errors
Reason
error processing APK: strconv.ParseInt: parsing "0x7fffffff": invalid syntax
General
- Target JaffaCakes118_d65343874d6e9de7e40dc495594ed0ef
- Size 15.8MB
- Sample250210-c4h6dsynhp
- SHA256 469b3ac4ca633139f43b33a7d2761e354288b68dfac4165dad16915733da2c8c
- MD5 d65343874d6e9de7e40dc495594ed0ef
- SHA1 b2927bb1630cd826a5788dc1ea9b2596dc6fa860
- SHA512 e06375259dccbdfc48d29892c8bd21d5c419e8dfff3b53f65a3f87ea96cee25ef20e1a19efd484c4df7913ba1afae88f864627704f1853320f68b0c07dc9c73b
- SSDEEP 393216:57VxC17fc0eMP6L0iu0UYnvXhm/UTsl+nV4G:TxC1DcaUu0U4hm/UT8+V4G
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Pegasus family
- Pegasus payload 1 IoCs
resource yara_rule static1/unpack001/Root·/tencentmobilemanager3.8.5_android_build0599.apk family_pegasus1 - Requests dangerous framework permissions 16 IoCs
description ioc Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether. android.permission.PROCESS_OUTGOING_CALLS Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call. android.permission.CALL_PHONE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read the user's contacts data. android.permission.READ_CONTACTS Allows an application to write the user's contacts data. android.permission.WRITE_CONTACTS Allows an application to read SMS messages. android.permission.READ_SMS Allows an application to receive SMS messages. android.permission.RECEIVE_SMS Allows an application to send SMS messages. android.permission.SEND_SMS Allows an application to monitor incoming MMS messages. android.permission.RECEIVE_MMS Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW Allows an application to read or write the system settings. android.permission.WRITE_SETTINGS Required to be able to access the camera device. android.permission.CAMERA Allows an application to record audio. android.permission.RECORD_AUDIO Allows an app to access precise location. android.permission.ACCESS_FINE_LOCATION Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Root·/AdbWinApi.dll unpack001/Root·/AdbWinUsbApi.dll unpack001/Root·/adb.exe
File Explorer
-
JaffaCakes118_d65343874d6e9de7e40dc495594ed0ef.zip 15.8MB
-
Root·/AdbWinApi.dll.dll 94KB
-
Root·/AdbWinUsbApi.dll.dll 59KB
-
Root·/CallMaster_V4.1.2.26_Android_pf145_bi800_(Build12073017).apk.apk 5.1MB
-
CallMasterNotification.apk.apk 40KB
-
Root·/RootExplorer.apk.apk 266KB
-
Root·/Superuser.apk.apk 488KB
-
Root·/SuperuserElite.apk.apk 143KB
-
Root·/USBFlash.dll.dll 99KB
-
Root·/adb.elf 334KB
-
Root·/adb.exe.exe 401KB
-
Root·/kBatteryDoctor_2.9_2000290_14824_20120914_125957_40000018_40000018.apk.apk 3.3MB
-
Root·/oupeng-1_1785_1785111_15_1.apk.apk 1.3MB
-
Root·/qixiazi_root.apk.apk 338KB
-
Root·/su.elf 21KB
-
Root·/tencentmobilemanager3.8.5_android_build0599.apk.apk 6.0MB
-
qqwebdisk8.tsp.apk 205KB
-
Root·/zergRush.elf 22KB
-
Root·/˫Root.bat12KB
Root·/AdbWinApi.dll
- IMPHASH c64cac39044626770353879245ea25e4
- SHA256 14a51482aa003db79a400f4b15c158397fe6d57ee6606b3d633fa431a7bfdf4b
- MD5 47a6ee3f186b2c2f5057028906bac0c6
- SHA1 fde9c22a2cfcd5e566cec2e987d942b78a4eeae8
- SHA512 6a2675de0c445c75f7d5664ebe8f0e2f69c3312c50156161e483927e40235140d5e28e340112ac552d6462366143890a8ce32dbf65bd37e27cb1ea290fe14584
- SSDEEP 1536:npCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt:npo0k6ZWVTaif6sCG
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
30527
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\code\android\donut\development\host\windows\usb\api\objfre_wxp_x86\i386\AdbWinApi.pdb
ole32
CoCreateInstance
kernel32
GetACP
SetLastError
CloseHandle
GetLastError
DeviceIoControl
WriteFile
ReadFile
GetOverlappedResult
CreateFileW
WideCharToMultiByte
Sleep
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetProcAddress
LoadLibraryW
GetFileAttributesW
GetSystemDirectoryW
RaiseException
FreeLibrary
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetCommandLineA
GetVersionExA
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
OutputDebugStringA
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
GetModuleHandleW
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
setupapi
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
??0AdbEndpointObject@@QAE@ABV0@@Z
??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z
??0AdbIOCompletion@@QAE@ABV0@@Z
??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z
??0AdbInterfaceObject@@QAE@ABV0@@Z
??0AdbInterfaceObject@@QAE@PBG@Z
??0AdbObjectHandle@@QAE@ABV0@@Z
??0AdbObjectHandle@@QAE@W4AdbObjectType@@@Z
??1AdbEndpointObject@@MAE@XZ
??1AdbIOCompletion@@MAE@XZ
??1AdbInterfaceObject@@MAE@XZ
??1AdbObjectHandle@@MAE@XZ
??4AdbEndpointObject@@QAEAAV0@ABV0@@Z
??4AdbIOCompletion@@QAEAAV0@ABV0@@Z
??4AdbInterfaceObject@@QAEAAV0@ABV0@@Z
??4AdbObjectHandle@@QAEAAV0@ABV0@@Z
??_7AdbEndpointObject@@6B@
??_7AdbIOCompletion@@6B@
??_7AdbInterfaceObject@@6B@
??_7AdbObjectHandle@@6B@
?AddRef@AdbObjectHandle@@UAEJXZ
?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?CloseHandle@AdbObjectHandle@@UAE_NXZ
?CreateHandle@AdbObjectHandle@@UAEPAXXZ
?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z
?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z
?GetParentInterfaceHandle@AdbEndpointObject@@QBEPAXXZ
?GetParentObjectHandle@AdbIOCompletion@@QBEPAXXZ
?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z
?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z
?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z
?IsCompleted@AdbIOCompletion@@UAE_NXZ
?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z
?IsOpened@AdbObjectHandle@@QBE_NXZ
?LastReferenceReleased@AdbObjectHandle@@MAEXXZ
?Lookup@AdbObjectHandle@@SGPAV1@PAX@Z
?Release@AdbObjectHandle@@UAEJXZ
?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?Type@AdbEndpointObject@@SG?AW4AdbObjectType@@XZ
?Type@AdbIOCompletion@@SG?AW4AdbObjectType@@XZ
?Type@AdbInterfaceObject@@SG?AW4AdbObjectType@@XZ
?adb_handle@AdbObjectHandle@@QBEPAXXZ
?endpoint_id@AdbEndpointObject@@QBEEXZ
?endpoint_index@AdbEndpointObject@@QBEEXZ
?interface_name@AdbInterfaceObject@@QBEABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?object_type@AdbObjectHandle@@QBE?AW4AdbObjectType@@XZ
?overlapped@AdbIOCompletion@@QAEPAU_OVERLAPPED@@XZ
?parent_interface@AdbEndpointObject@@QBEPAVAdbInterfaceObject@@XZ
?parent_io_object@AdbIOCompletion@@QBEPAVAdbEndpointObject@@XZ
?usb_config_descriptor@AdbInterfaceObject@@QBEPBU_USB_CONFIGURATION_DESCRIPTOR@@XZ
?usb_device_descriptor@AdbInterfaceObject@@QBEPBU_USB_DEVICE_DESCRIPTOR@@XZ
?usb_interface_descriptor@AdbInterfaceObject@@QBEPBU_USB_INTERFACE_DESCRIPTOR@@XZ
AdbCloseHandle
AdbCreateInterface
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetDefaultBulkReadEndpointInformation
AdbGetDefaultBulkWriteEndpointInformation
AdbGetEndpointInformation
AdbGetEndpointInterface
AdbGetInterfaceName
AdbGetOvelappedIoResult
AdbGetSerialNumber
AdbGetUsbConfigurationDescriptor
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbHasOvelappedIoComplated
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbOpenEndpoint
AdbQueryInformationEndpoint
AdbReadEndpointAsync
AdbReadEndpointSync
AdbResetInterfaceEnum
AdbWriteEndpointAsync
AdbWriteEndpointSync
Name
.text
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=116, id=1, productName=Unmarked objects,
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=94, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=59, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Root·/AdbWinUsbApi.dll
- IMPHASH fda9f9f5f569ddd0dbf3ad8a275a2eb8
- SHA256 041c6859bb4fc78d3a903dd901298cd1ecfb75b6be0646b74954cd722280a407
- MD5 5f23f2f936bdfac90bb0a4970ad365cf
- SHA1 12e14244b1a5d04a261759547c3d930547f52fa3
- SHA512 49a7769d5e6cb2fda9249039d90465f7a4e612805bba48b7036456a3bbd230e4d13da72e4ade5155ddc08fe460735ec8d6df3bb11b72ff28e1149221e2fc3048
- SSDEEP 768:HLNk0yiFYWkgALpW+QvSugX0wUepQNXTQXdF+Q+An70edrqqOkIW:+yY8wugEwOVEXdz70e4gI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16084
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\code\android\donut\development\host\windows\usb\winusb\objfre_wxp_x86\i386\AdbWinUsbApi.pdb
ole32
CoCreateInstance
kernel32
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
OutputDebugStringA
ExitProcess
LoadLibraryA
GetModuleHandleW
GetCPInfo
GetACP
GetOEMCP
GetModuleHandleA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
GetProcAddress
HeapAlloc
HeapFree
RtlUnwind
GetVersionExA
GetCommandLineA
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
Sleep
CreateFileW
WideCharToMultiByte
CreateEventW
CloseHandle
GetLastError
SetLastError
InterlockedDecrement
GetLocaleInfoA
winusb
WinUsb_GetDescriptor
WinUsb_Free
WinUsb_QueryPipe
WinUsb_GetOverlappedResult
WinUsb_ReadPipe
WinUsb_WritePipe
WinUsb_QueryInterfaceSettings
WinUsb_GetCurrentAlternateSetting
WinUsb_Initialize
WinUsb_SetPipePolicy
adbwinapi
?IsCompleted@AdbIOCompletion@@UAE_NXZ
??0AdbIOCompletion@@QAE@PAVAdbEndpointObject@@KPAX@Z
?GetUsbConfigurationDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_CONFIGURATION_DESCRIPTOR@@@Z
?GetUsbDeviceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_DEVICE_DESCRIPTOR@@@Z
?GetInterfaceName@AdbInterfaceObject@@UAE_NPAXPAK_N@Z
??0AdbInterfaceObject@@QAE@PBG@Z
??1AdbEndpointObject@@MAE@XZ
?SyncWrite@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?SyncRead@AdbEndpointObject@@UAE_NPAXKPAKK@Z
?AsyncWrite@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?AsyncRead@AdbEndpointObject@@UAEPAXPAXKPAK0K@Z
?GetEndpointInformation@AdbEndpointObject@@UAE_NPAU_AdbEndpointInformation@@@Z
?LastReferenceReleased@AdbObjectHandle@@MAEXXZ
?IsObjectOfType@AdbObjectHandle@@UBE_NW4AdbObjectType@@@Z
?CloseHandle@AdbObjectHandle@@UAE_NXZ
?CreateHandle@AdbObjectHandle@@UAEPAXXZ
?AddRef@AdbObjectHandle@@UAEJXZ
??0AdbEndpointObject@@QAE@PAVAdbInterfaceObject@@EE@Z
??1AdbIOCompletion@@MAE@XZ
??1AdbInterfaceObject@@MAE@XZ
?GetUsbInterfaceDescriptor@AdbInterfaceObject@@UAE_NPAU_USB_INTERFACE_DESCRIPTOR@@@Z
InstantiateWinUsbInterface
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=123, productName=VS2005 build 50727, version=50727,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=128, id=1, productName=Unmarked objects,
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=73, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=42, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Root·/CallMaster_V4.1.2.26_Android_pf145_bi800_(Build12073017).apk
- SHA256 38a935b4e8d2fe286af48c6dd7bf20f1df2c503584f07f23b21037e484799a1c
- MD5 2d92f4cf0b911f01429d25022e4fb351
- SHA1 1f62e59ded4b7ce875e7bc44bdc6e3f604c4009d
- SHA512 e8fe7238af4985a80d73da1e20d67c421af987becdf0bee8ece63dd25cd61963b73bf41ec1d9173b27e94f1340ef76704a2dd7562ef6549183ab1dccde7071cc
- SSDEEP 98304:GADZ3lk9Ce7HIXT0/3AvyoncDstctO418arXqZjI4dCAIvFNx12My:GsZ1k0e/AvBcDstcZ1We4dy3OMy
- MD5 SHA1 SHA512 SSDEEP
com.blovestorm
.application.DialerActivity
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.READ_PHONE_STATE
android.permission.MODIFY_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.CALL_PHONE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_SMS
android.permission.WRITE_SMS
android.permission.RECEIVE_SMS
android.permission.VIBRATE
android.permission.SEND_SMS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RECEIVE_MMS
android.permission.RESTART_PACKAGES
android.permission.RAISED_THREAD_PRIORITY
com.android.launcher.permission.INSTALL_SHORTCUT
Intent.FLAG_GRANT_READ_URI_PERMISSION
Intent.FLAG_GRANT_WRITE_URI_PERMISSION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WAKE_LOCK
android.permission.READ_LOGS
android.permission.WRITE_SETTINGS
android.permission.GET_TASKS
android.permission.PERSISTENT_ACTIVITY
android.permission.CAMERA
android.permission.RECORD_AUDIO
android.permission.RECORD_VIDEO
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
.application.CallMaster
com.blovestorm.UC_BROWSER_BLOVESTORM_COMPLETED
.application.more.LocationQueryActivity
.application.more.CommunicationStrengthenActivity
.message.mms.MmsControlMessageDialog
.message.mms.NewMessageToSendActivity
android.intent.action.SEND
.message.mms.AddReceiverFromContactActivity
.application.DialerActivity
android.intent.action.MAIN
android.intent.action.MAIN
android.intent.action.MAIN
com.blovestorm.action.START_SMART_DIALER
com.blovestorm.action.VIEW_MISS_VOIP_CALL
com.blovestorm.action.VIEW_CONVERSATION
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.CALL_BUTTON
android.intent.action.DIAL
android.intent.action.VIEW
android.intent.action.DIAL
.application.DialerActivity2
android.intent.action.MAIN
.toolbox.activity.ToolboxActivity
.application.more.DialerActivityMain
.contact.activity.ContactsListActivity
.contact.activity.SmartDialerActivity
.message.entry.DonkeyMessagesActivity
.contact.activity.CollectActivity
.application.more.ShowSetDefaultDialerDialogActivity
.contact.activity.SmartDialerSettingActivity
.contact.activity.SpeedDialListActivity
.application.more.ShowAddToBlacklistDialog
.application.more.CreateSmartdialerShortcutActivity
android.intent.action.CREATE_SHORTCUT
.application.more.CreateDonkeymessagesShortcutActivity
android.intent.action.CREATE_SHORTCUT
.application.more.CreateContactslistShortcutActivity
android.intent.action.CREATE_SHORTCUT
.toolbox.callsetting.activity.CallInfoSetTAbActivity
.toolbox.callsetting.activity.CallInfoSetActivity
.toolbox.callsetting.activity.CallInfoCustomSetActivity
.toolbox.callsetting.activity.CallInfoContentSetActivity
.toolbox.callsetting.activity.CallInfoDisplaySetActivity
.toolbox.callsetting.activity.CallInfoLayoutSetActivity
.toolbox.callsetting.activity.CallInfoFontSetActivity
.toolbox.callsetting.activity.CallInfoLineContentSetActivity
.application.more.SimpleStringsSetActivity
.toolbox.iprule.IpSetActivity
.toolbox.iprule.IpRuleSetActivity
.application.more.UsefulNumbersActivity
.application.more.CodeLibsManActivity
.application.more.CodeLibEditActivity
.application.more.TimeRuleSetActivity
.toolbox.callsetting.activity.CallInfoBelongToWhereSetActivity
.toolbox.callsetting.activity.CallInfoPersonalBelongToWherePosSetActivity
.toolbox.intercept.activity.InterceptRuleTabActivity
.toolbox.intercept.activity.BWlistActivity
.toolbox.intercept.activity.InterceptRuleActivity
.toolbox.intercept.activity.InterceptRuleEditActivity
.toolbox.intercept.activity.InterceptRuleCompagesActivity
.toolbox.intercept.activity.InterceptTaskActivity
.toolbox.intercept.activity.InterceptTaskAddActivity
.toolbox.intercept.activity.InterceptRuleConfigActivity
.toolbox.intercept.activity.ShowRingOnceTipDialog
.toolbox.intercept.activity.ShowShortCallEndDialog
.toolbox.intercept.activity.BlacklistActivity
.toolbox.intercept.activity.BlacklistAddActivity
.toolbox.intercept.activity.WhitelistActivity
.toolbox.intercept.activity.WhitelistAddActivity
.application.more.ListImportActivity
.message.mms.ImageViewer
.message.mms.MMSReader
.message.mms.MmsSettingActivity
.toolbox.intercept.activity.InterceptSmsRecordActivity
.toolbox.intercept.activity.InterceptCallRecordActivity
.toolbox.privacy.activity.PrivacyTabActivity
.toolbox.privacy.activity.PrivacyBookActivity
.toolbox.privacy.activity.PrivacySmsRecordActivity
.toolbox.privacy.activity.PrivacyCallRecordActivity
.toolbox.privacy.activity.PrivacyListAddActivity
.toolbox.privacy.activity.PrivacyConversationActivity
.toolbox.privacy.activity.PrivacyCallRecordActivity
.toolbox.privacy.activity.PrivacyConfigActivity
.toolbox.privacy.activity.PrivacyListAddActivity
.toolbox.privacy.activity.PrivacyConversationActivity
.toolbox.privacy.activity.PrivacyPasswordDlg
.ui.InterceptFirstActivity
.application.more.DeliveryMessageAvtivity
.toolbox.datalistener.activity.DataListenerActivity
android.intent.action.DEFAULT
com.blovestorm.action.SHOW_AUTOADJUST_DIALOG
.toolbox.datalistener.activity.DataListenerTabActivity
.toolbox.datalistener.activity.WIFIDataListenerActivity
.toolbox.datalistener.activity.DataListenerSetActivity
.toolbox.datalistener.activity.ShowDialogActivity
com.blovestorm.message.entry.PopUnreadMessageWindow
.message.ucim.activity.ShowNetWorkCallActivity
.application.more.ShowUnreadTipDialogActivity
.application.more.StartOtherActivity
.contact.activity.ContactDetailsActivity
android.intent.action.VIEW
.contact.activity.CallLogsDetailsSingleActivity
.contact.activity.CallLogsDetailsActivity
.contact.activity.CallLogsUtalkActivity
.message.ucim.activity.ActivityChatting
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SENDTO
.message.ucim.activity.ActivityCalling
.more.activity.ActivityPage
.more.activity.DonkeyNotifiactionSettingAcitvity
.message.ucim.activity.ActivityVideoRecorder
.message.ucim.activity.ActivityVideoPlayer
.more.activity.ActivityFindFriend
.more.activity.ActivityShowFriend
.more.activity.DonkeyTrafficMonitor
.message.ucim.activity.AddDonkeyReceiver
.message.ucim.activity.DonkeyGroupMemberReview
.more.activity.DonkeyFriendInfoActivity
.more.activity.DonkeyRegisterSuccessActivity
.more.activity.DonkeyRegisterActivity
.more.activity.DonkeySystemMsgActivity
.more.activity.DonkeyMeInfoActivity
.more.activity.DonkeyPrivacySettingActivity
.more.activity.AboutActivity
.more.activity.AboutDetailActivity
.more.activity.DonkeyMoreActivity
.contact.activity.ListItemIndex
.application.more.DonkeySmartMsgAcitvity
com.blovestorm.message.entry.HighQualifiedAvatarReader
.more.activity.DonkeyRegisterSuccessFindFriend
.more.activity.SettingCenterActivity
.toolbox.appupdate.activity.AppCheckActivity
.toolbox.appupdate.activity.AppUpdateActivity
.toolbox.appupdate.activity.AppPromotedActivity
.more.activity.SkinManagerActivity
.daemon.SmsMasterD
.daemon.CallMasterD
com.blovestorm.daemon.ILocationService
.daemon.DataListenerService
.message.mms.SmsReceiverService
.daemon.ClientUpdateService
.toolbox.appupdate.service.AppUpdateService
.daemon.BootReceiver
android.intent.action.BOOT_COMPLETED
.daemon.SmsReceiver
android.provider.Telephony.SMS_RECEIVED
.daemon.OutgoingCallReceiver
android.intent.action.NEW_OUTGOING_CALL
android.intent.action.NEW_OUTGOING_CALL_FROM_CALLMASTER
.daemon.IncomingCallReceiver
android.intent.action.PHONE_STATE
.daemon.CallMasterEventReceiver
com.blovestorm.action.UPDATE_THREAD
.daemon.DndReceiver
com.blovestorm.donkey.dnd.ALARM_ALERT
.daemon.AutoWackupReceiver
com.blovestorm.donkey.autowakeup.NOTIFY
.daemon.UnreadMessageNotifier
com.blovestorm.unread.message.NOTIFY
.daemon.TrafficResetReceiver
com.blovestorm.donkey.TRAFFIC_RESET
.daemon.BootReceiver
android.intent.action.BOOT_COMPLETED
.ui.DataWidget
android.appwidget.action.APPWIDGET_UPDATE
com.blovestorm.intent.action.DATA_CHANGED
com.blovestorm.intent.action.Intent_REQUEST
.message.mms.SmsReceiver
com.android.mms.transaction.MESSAGE_SENT
android.intent.action.SEND_MESSAGE
.message.mms.MessageStatusReceiver
com.android.mms.transaction.MessageStatusReceiver.MESSAGE_STATUS_RECEIVED
.message.mms.PushReceiver
android.provider.Telephony.WAP_PUSH_RECEIVED
com.blovestorm.common.AlarmReceiver
.daemon.ClearNotificationReceiver
com.blovestorm.intent.action.CLEAR_NOTIFICATION
com.blovestorm.daemon.NetworkMonitorForStartApp
android.net.conn.CONNECTIVITY_CHANGE
.toolbox.appupdate.service.AppAutoCheckReceiver
com.blovestorm.intent.action.AUTO_APP_CHECK
com.blovestorm.intent.action_MAUNAL_APP_CHECK
.common.InterceptProvider
.common.PrivacyProvider
.common.CallRingProvider
CallMasterNotification.apk
- SHA256 895a85d7d6d4f94a7594a4167851ef7c5213e925f6c9d42ecf3f4a7833b94fb5
- MD5 fe1b07d802266f62ab32e1d1b5aef259
- SHA1 f097059ce924114043db4f51b02d847bb14118e8
- SHA512 43fd641c2a8af688aa2c3d2b6e0d944c2fbbba9e704f2988a88b61dee71cc717bb676dd41c4df82cb02765f0b59890b87bb58810501a0666658fbf7eca79b66a
- SSDEEP 768:i0TZruOrXFWLKxe7X+Fu9LgRv6Xf3tpD+X7aFkuzRVV35:OObgLKxe7wuit6X/yLaFR5
- MD5 SHA1 SHA512 SSDEEP
com.blovestorm.utils
.UninstPluginDialogActivity
android.permission.MODIFY_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
.UninstPluginDialogActivity
.CancelNotifyBroadcastReceiver
com.blovestorm.CLEAR_MISSED_CALLS_NOTIFICATION
android.intent.action.PACKAGE_REMOVED
android.intent.action.BOOT_COMPLETED
com.blovestorm.action.WAIT_FOR_REINSTALL
.CancelNotifyContentProvider
Root·/RootExplorer.apk
- SHA256 f2b6c42ae1ec9b43196a4177c38f1f983ef83a66e36d85f1a6ff8523c33dc784
- MD5 bbb4dbe120b2458742662262c46414e5
- SHA1 e32441c58dc8860044589e219722e262b0d7b515
- SHA512 3d17f8ecc5c17201de4259a5df8e1ebcfe65054725aec682c1cc7407631874c53002465ea7fa88ed943b23a98b98277a9e817be74451dcc5eebdb1bedf78bc73
- SSDEEP 6144:xPu3N6nxUbPGopBhAeLDT8/FjVqH2t2YNf7i:J06noPrvtLDT8/FjwH2t/W
- MD5 SHA1 SHA512 SSDEEP
com.speedsoftware.rootexplorer
.RootExplorer
android.permission.WRITE_EXTERNAL_STORAGE
.RootExplorer
android.intent.action.MAIN
android.intent.action.GET_CONTENT
.PermissionsActivity
.ScriptActivity
.DisplayText
.BookmarkList
.SearchCriteria
.Preferences
.ViewDatabase
.ViewTable
.SQLiteEditorAdvert
.CreateArchive
.AboutActivity
.ChangeOwnerActivity
Root·/Superuser.apk
- SHA256 03a7e6999e5f8759f08cf658caffcb0f747c123c3dd850449572b108a6f984ca
- MD5 2b0841691802d36cb915b5f6f613f8d0
- SHA1 01efd9bd56a329f40547f456e62c540ca10bb679
- SHA512 d1bd21528865ac09efe620ea6c4c278a45a16d0e732f8d57462cca85ae37e5963b6ef6645ac6e15638ec4742faf9bf643729881e5baf69164c9fdab3b285fd24
- SSDEEP 12288:PXTg8njYldQ0508rHL/d5/TBxjfwCfLetjfohZcvMsWtww/iSP08e:PskMs/608e
- MD5 SHA1 SHA512 SSDEEP
com.noshufou.android.su
HomeActivity
com.noshufou.android.su.RESPOND
com.noshufou.android.su.provider.READ
com.noshufou.android.su.provider.WRITE
android.permission.INTERNET
android.permission.NFC
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.RECEIVE_BOOT_COMPLETED
HomeActivity
AppDetailsActivity
.preferences.PreferencesActivity
preferences.PreferencesActivityHC
UpdaterActivity
SuRequestActivity
PinActivity
TagWriterActivity
.service.ResultService
.service.PermissionsDbService
SuRequestReceiver
com.noshufou.android.su.REQUEST
SuResultReceiver
com.noshufou.android.su.RESULT
com.noshufou.android.su.NOTIFICATION
SecretCodeReceiver
android.provider.Telephony.SECRET_CODE
InstallReceiver
android.intent.action.PACKAGE_ADDED
UninstallReceiver
android.intent.action.PACKAGE_REMOVED
UpdatePermissionsReceiver
com.noshufou.android.su.UPDATE_PERMISSIONS
android.intent.action.BOOT_COMPLETED
.provider.PermissionsProvider
Root·/SuperuserElite.apk
- SHA256 a1b7fcb40e285c2b03b4ee0b711786b4051a5bee81671ffb271995e82e154936
- MD5 344ec8c455ac2588b3fb6fe55f193dc1
- SHA1 dc6cc31c8a57763830dff0091b0a55e144b87d1e
- SHA512 925b31fa3c6a4d383b44926f8c85e216ef39377a74241df5c7b9a81d5243b929ccb5bad928c3d931c7038bd8d56ec85defe8ed126e423c240daae5af8eef3038
- SSDEEP 3072:T3BTjnMkTxofh5+ZwyjZwqyTayosQbQq8uWtPTK4kMfaOx:T3XGfh56wAtIQUNuW51kMfrx
- MD5 SHA1 SHA512 SSDEEP
com.noshufou.android.su.elite
FeaturedAppsActivity
com.android.vending.CHECK_LICENSE
android.permission.INTERNET
com.noshufou.android.su.provider.READ
FeaturedAppsActivity
BetaDownloaderActivity
.service.ResultService
.service.DownloaderService
.service.LicenseService
com.noshufou.android.su.elite.LicenseChecker
Root·/USBFlash.dll
- IMPHASH e090151c8a00d97764fc7f52dbd461f7
- SHA256 6f28c17741a5dc0e1cf6af7f00b6daa2bd7e3fc3de776dd53c1ea26691aa75e3
- MD5 bdf145830abe393f0b9b96dfaf335315
- SHA1 9aae0645b33c06d5657b56a697c534525dd40019
- SHA512 a521d5b2f0b25612cc0f5d984f79dfd6e15f4057e799cc2d3f89e30e45432f73f0b1778f679669bc6959c7b32dd8b89cba03f42f32a158d7a1065e676c0ec279
- SSDEEP 1536:I6Yu3CbGL1QoD/v9d/dD3FYKWAZEtUqkxXnN2TBAsmmXc:PYu3CbGL1rdJF9uAsmm
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a0:02:05:e3:b1:27:2c:b6:fc:85:f1:d4:be:76:be:7b:b2:7f:16:0c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Sony Ericsson Mobile Communications AB,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Customer Services,O=Sony Ericsson Mobile Communications AB,L=Lund,ST=Skane,C=SE
Chains
Feb 9, 2025
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Sony Ericsson Mobile Communications AB,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Customer Services,O=Sony Ericsson Mobile Communications AB,L=Lund,ST=Skane,C=SE
Serial Number
08:05:50:17:2d:08:94:7c:d6:29:80:77:70:87:87:b9
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 14, 2007 - Jun 13, 2010
Minor OS version
0
Major OS version
4
Entry point
17952
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
setupapi
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
kernel32
SetLastError
FlushFileBuffers
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateFileW
CloseHandle
CancelIo
GetOverlappedResult
WaitForSingleObject
GetLastError
CreateEventW
ReadFile
WriteFile
ClearCommError
DeviceIoControl
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
_JNI_OnLoad@8
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_clearStatusDFU@12
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_close@12
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_downloadDFU@16
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_getMaxAllowedBufferSize@8
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_getStatusDFU@12
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_openChannel@16
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_readBytes__II@16
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_readBytes__III@20
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_rxByteCount@12
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_switchToDFU@12
_Java_com_sonyericsson_cs_usbflashnative_impl_USBFlashNativeImpl_writeBytes@16
Name
.text
Size
56KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=102, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=98, id=1, productName=Unmarked objects,
count=50, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Root·/adb
- SHA256 d7d5d247fbf8b13f1252431ece37369a5e7ca27fb2806dc83001cf4dc3cf1e7c
- MD5 a02369cc66fd1ddb2e7766f6faf14c12
- SHA1 8c3236cabea8b21e7d0e84ce98698e04bfd8ed7d
- SHA512 1367d458700df19b16e83e08e61c521212bcddfae1a8604a9f3cfa02828810421faeb4e3d83d97e3812ef068ccfdfba372bbb7578229281c533dcae29e48ac40
- SSDEEP 6144:k/LfrBYG73L94DnC38QqWLTB35d1H6CeEqXAsMmDJNa6uKofOFIpkGqcE:kxYGn+nw8QqWLTB5iXEqHMmDJTuKo2iY
- MD5 SHA1 SHA512 SSDEEP
Root·/adb.exe
- IMPHASH fef6cee9d0e4eec527f09da74363e32f
- SHA256 e2891042c110b2057d77af9383ae379d205abbd92ef5481b1a87047ee95f3bf5
- MD5 0717be6b32a22d03fe020d6632a72254
- SHA1 88455686faee52779e30d8ef17717075bc50e7ae
- SHA512 16a6cda40b339aa2e696f4c20266be123e6c071475409cc5ae3bf5d8724bc818fb77d2b98a7945d63fdd9750de681f4c36a31d2d3e37991e48160a298613a91b
- SSDEEP 12288:15aUajz9j0rThRjGesX9a1oAKmTqU/phLdsGsrU:6bIThf4sL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4400
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CloseHandle
CreateEventA
CreateFileA
CreatePipe
CreateProcessA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetFileAttributesA
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetSystemTimeAsFileTime
GetTempPathA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReadFile
ResetEvent
SetConsoleCtrlHandler
SetEvent
SetFilePointer
SetHandleInformation
SetLastError
SetUnhandledExceptionFilter
Sleep
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
msvcrt
_access
_chmod
_getcwd
_getpid
_read
_stat
_strdup
_stricmp
_unlink
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_beginthread
_cexit
_errno
_findclose
_findfirst
_findnext
_fullpath
_iob
_isctype
_mkdir
_onexit
_pctype
_setmode
abort
atexit
atoi
calloc
exit
fflush
fgets
fopen
fprintf
fputc
free
fwrite
getenv
localeconv
malloc
memcpy
memset
perror
realloc
setvbuf
signal
sscanf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncat
strncpy
strpbrk
strrchr
strtol
strtoul
wcslen
shell32
SHGetFolderPathA
ws2_32
WSACleanup
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAStartup
accept
bind
closesocket
connect
gethostbyname
htonl
htons
listen
recv
send
setsockopt
shutdown
socket
adbwinapi
AdbCloseHandle
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbGetEndpointInformation
AdbGetInterfaceName
AdbGetSerialNumber
AdbGetUsbDeviceDescriptor
AdbGetUsbInterfaceDescriptor
AdbNextInterface
AdbOpenDefaultBulkReadEndpoint
AdbOpenDefaultBulkWriteEndpoint
AdbReadEndpointSync
AdbWriteEndpointSync
Name
.text
Size
93KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
668B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
/4
Size
1024B
Virtual Size
768B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/35
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/47
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/61
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/73
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/86
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/97
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/108
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Root·/kBatteryDoctor_2.9_2000290_14824_20120914_125957_40000018_40000018.apk
- SHA256 d0f4c45eb21af24de102472e8706a87a30bafe6ae56f65d2e3873a1e8fe9dca8
- MD5 9fc194a858aff88d2561189713870f56
- SHA1 61ca381b1d1d7263b6cb5fadca00b2f37678a976
- SHA512 7e934f289e8d25037ac21131e78bf4ac40ae9de4ee5dbc044fa9c70fdc957cac46881a1475f56b8da99a67529c0cc795b69ebd1606bc0d3a4058663fee159313
- SSDEEP 49152:5fBXNoN9VRVPf01f+xsyEMA6l06L4PhCPfRysQ7zGjbuCVEZ:zNonVnf01VyrA6lZ450fst7WwZ
- MD5 SHA1 SHA512 SSDEEP
com.ijinshan.kbatterydoctor
.SplashActivity
android.permission.SET_WALLPAPER
android.permission.BATTERY_STATS
android.permission.WRITE_SETTINGS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.RESTART_PACKAGES
android.permission.CAMERA
android.permission.VIBRATE
android.permission.WRITE_APN_SETTINGS
android.permission.MODIFY_PHONE_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.GET_TASKS
android.permission.SYSTEM_ALERT_WINDOW
.SplashActivity
android.intent.action.MAIN
.ScreenSplashActivity
.MsgDeskActivity
.BatteryTabActivity
intent_action
.BatteryStatusActivity
com.ijinshan.kbatterydoctor.chargerecord.info.ChargerecordInfoActivity
.BatteryChargingActivity
.ChargeRecordActivity
.powermanager.PowerUsageDetail
com.ijinshan.kbatterydoctor.SuggestionFeedback
.ScreensaverActivity
.BatteryModeSwitchActivity
.mode.SavingModeListActivity
.LowInteModeActivity
.alarmmode.AlarmModeClock
.alarmmode.SetAlarm
.alarmmode.ClockModeNoticeDialog
.IntelligentModeActivity
.mode.SetModeActivity
.mode.CustomModeDetailActivity
.BatteryInfoActivity
com.ijinshan.kbatterydoctor.powermanager.PowerUsageSummaryListActivity
com.ijinshan.kbatterydoctor.powermanager.PowerUsageAppListActivity
com.ijinshan.kbatterydoctor.powermanager.PowerUsageTabActivity
.BatteryMaintenanceActivity
.MainSettingActivity
.BatteryStatusStyle
.tools.ToolsActivity
.AutoUpdateNoticeDialog
.LowLevelNoticeDialog
.LowWifiNoticeDialog
.LowMmNoticeDialog
.CleanWhiteListActivity
.BatteryAvliableTimeActivity
.mode.ImportModeActivity
.GenerateQRcodeActivity
.mode.CaptureActivity
.ShortcutChangeModeActivity
.ShortcutBatteryInfoActivity
android.intent.action.MAIN
.ShortcutWidgetMoreActivityNew
android.intent.action.MAIN
.ShortcutWidgetMoreActivity
android.intent.action.MAIN
.ShortcutAddActivity
android.intent.action.MAIN
android.intent.action.CREATE_SHORTCUT
.SetShareSinaWeiboActivity
com.weibo.net.ShareActivity
com.weibo.net.WeiboDialogActivity
.GuideActivity
.GuideFuncActivity
com.ijinshan.kbatterydoctor.tools.CommonToolsActivity
com.ijinshan.kbatterydoctor.tools.AppRecommendActivity
.SensorActivity
.BoutiqueActivity
.RecommendAppActivity
.RecommendGameActivity
.NullActivity
MoxiuActivity
ScreensaverSettingsActivity
ScreensaverThemeActivity
com.ijinshan.kbatterydoctor.service.KBatteryDoctorService
com.ijinshan.kbatterydoctor.service.UpdateApkService
com.ijinshan.kbatterydoctor.service.BatteryOptService
.service.PowerUsageRankService
.alarmmode.AlarmModeReceiver
com.ijinshan.kbatterydoctor.ALARM_MODES_ALERT
.alarmmode.AlarmModeInitReceiver
android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED
android.intent.action.LOCALE_CHANGED
com.ijinshan.kbatterydoctor.receiver.BatteryOptWidget
android.appwidget.action.APPWIDGET_UPDATE
com.ijinshan.kbatterydoctor.receiver.BatteryOptWidgetBig
android.appwidget.action.APPWIDGET_UPDATE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.PROVIDER_CHANGED
android.net.conn.CONNECTIVITY_CHANGE
android.media.RINGER_MODE_CHANGED
android.media.VOLUME_CHANGED_ACTION
com.ijinshan.kbatterydoctor.receiver.ShortcutWidget
android.appwidget.action.APPWIDGET_UPDATE
android.net.wifi.WIFI_STATE_CHANGED
android.intent.action.PROVIDER_CHANGED
android.net.conn.CONNECTIVITY_CHANGE
android.media.RINGER_MODE_CHANGED
android.media.VOLUME_CHANGED_ACTION
com.ijinshan.kbatterydoctor.ACTION_SHORTCUT_CLICKED
com.ijinshan.kbatterydoctor.ACTION_SHORTCUT_CHANGED
com.ijinshan.kbatterydoctor.receiver.AlarmReceiver
com.ijinshan.kbatterydoctor.receiver.BatteryStatusReceiver
com.ijinshan.kbatterydoctor.receiver.SwitchScreenTimeoutReceiver
com.ijinshan.kbatterydoctor.receiver.BluetoothMonitorReceiver
com.ijinshan.kbatterydoctor.receiver.WifiMonitorReceiver
com.ijinshan.kbatterydoctor.receiver.PhoneSinalMonitorReceiver
com.ijinshan.kbatterydoctor.receiver.NetChangeedReceiver
android.net.conn.CONNECTIVITY_CHANGE
com.ijinshan.kbatterydoctor.receiver.AutoUpdateAlarm
com.ijinshan.kbatterydoctor.receiver.ACTION_AUTO_UPDATE
com.ijinshan.kbatterydoctor.receiver.CircleIntervalAlarm
com.ijinshan.kbatterydoctor.receiver.ACTION_CIRCLE_INTERVAL
com.ijinshan.kbatterydoctor.receiver.AutoStartUpReceiver
android.intent.action.BOOT_COMPLETED
.receiver.UserPresentReceiver
android.intent.action.USER_PRESENT
.receiver.ReportDataReceiver
android.intent.action.PACKAGE_ADDED
.alarmmode.AlarmModeProvider
.mode.ModeProvider
Root·/oupeng-1_1785_1785111_15_1.apk
- SHA256 a7fa7a23fe83ae41b57bd81e64d239b1b29f1e784dc884bb8bebfd7b58dbfb8b
- MD5 bbe38cfcef0a376b6a0cc0f42e4992e7
- SHA1 f28205d4f9bb6e885ec29e3967544fe2e22c589c
- SHA512 cab2de518f1b585d555c1461be4e7f51b63a4d714a9bce44e21ad82ed7a381d6d29ff72693bfb48e032c0cd0a8a05e2089a20a040b1b3d13465dd37e6f9609eb
- SSDEEP 24576:28RnifyOJQWfikgIQh4pLF8anYSuwwB6EeOF8XCy2qsbkbxHivQyO25RAnrQO:pG3JvfiPIlFF8anTu/BheOSTPsvvtIsO
- MD5 SHA1 SHA512 SSDEEP
com.oupeng.mini.android
com.opera.mini.android.Browser
android.permission.INTERNET
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_NETWORK_STATE
android.permission.NFC
android.permission.READ_PHONE_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.browser.permission.READ_HISTORY_BOOKMARKS
com.opera.mini.android.Browser
android.intent.action.MAIN
android.intent.action.VIEW
android.nfc.action.NDEF_DISCOVERED
com.opera.mini.android.DisplayNotificationService
com.opera.mini.android.NetworkChangedReceiver
android.net.conn.CONNECTIVITY_CHANGE
com.opera.mini.android.ClearAllNotificationsReceiver
com.opera.mini.android.OpMiniInstallReferrerReceiver
com.android.vending.INSTALL_REFERRER
Root·/qixiazi_root.apk
- SHA256 5973d13f677af8ccc98f611a9118dae47f4f04f81128bc1e7c35e0031ae6c704
- MD5 7ce9b74efca58846a637fae220d98bb7
- SHA1 ade1fa02c079bc0dd2d3b3ebd6b9b224e9364f31
- SHA512 b387aaac098305f19450b49ea0b4ce1785ab8a14bf8c54d480c7b34d634cdf2eedbd55f7c1b76614b28f4aa1f932c463026af0bea58acc63a117415711c1e1ed
- SSDEEP 6144:8wTb9AGeXYhkiW1PIkgqFwQz3AfkxgLpoWvQ91s7xYXuWbjczMsL2A8TVNOOY:pTbmGtbW1PI/qF3HxgLi2Qk7x6b29L2K
- MD5 SHA1 SHA512 SSDEEP
com.qixiazi.market
.LoadingActivity
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_LOGS
android.permission.READ_PHONE_STATE
android.permission.INTERNET
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
.LoadingActivity
android.intent.action.MAIN
.SuggestViewpaperActivity
.ViewPaperActivity
.MainActivity
.MainPageActivity
.SuggestActivity
.TypeActivity
.TypeListActivity
.SearchActivity
.SearchListActivity
.TypeDataListActivity
.ManageActivity
.AppActivity
.AppInfoActivity
.RemarkListActivity
.IntalledActivity
.UpdatedActivity
.DownLoadManageActivity
.DownedActivity
.NotifyActivity
.ViewFlipperActivity
.RankActivity
.RankListActivity
com.qixiazi.market.download.QxzDownService
Root·/su
- SHA256 10addec98f002575324420a4f0cc1511893c70d7f1b5dbe8f77fb1b9bdc72b1b
- MD5 69b9e0a7bb69d59b286e48e17e90dc38
- SHA1 e8ed61a91eca85afa058abab9d1c6283915d3b74
- SHA512 4660cbdc0a0b6b97bec9f122aafdb5840fb1811afb9e3c64ee7ee770c5f9bc1cedf9763be8a014325ddbee7f13eb9bde2bee902d1a44c9e593f63f4a6aced5e8
- SSDEEP 192:0IIHPrGsZNzPVoP5SB9t5M4uc4yNYJvDwKkfqp7rOqa8hXu6S:0dzLzPVq+9t5M4ucVGbYq7qqbhhS
- MD5 SHA1 SHA512 SSDEEP
Root·/tencentmobilemanager3.8.5_android_build0599.apk
- SHA256 8dee250e1ee08071109fb420c3297230161c9bdfd825c30d343fd28c96f76e1b
- MD5 1843355ddaf4b862458fa13a8bc4a176
- SHA1 82b94db3987b6186ce26097c0e4194f49bb0ef35
- SHA512 0c782d86d6f802dec23a39ce6d2ef79fb08bacbd16cb2fe454d9ce7454ff381be10f1df994097c225239ceffb7a4b23e14cb1f82383df31913d5c1d56d627f05
- SSDEEP 98304:n5cdV1A3Vqz+7xLEqpQSk5rjRwqpzZYVEMfj9G9tuNpDA1fkhx/V7mxg5:5cdVWFqz2IqySk3NpzZt0Q9tuWfkmg5
- MD5 SHA1 SHA512 SSDEEP
-
Pegasus payload
qqwebdisk8.tsp
- SHA256 5cd29c226a0bb7a2a3e2ce9a5d1b77840d517af55d9240cc24f3b1b43ae6b7df
- MD5 c6045fc1bea9fb91970cc397f8f4f9d7
- SHA1 eeda3a95675f6745b945fd565086649ed45be4ab
- SHA512 2d10c429d8295019264be059b698b4b318c1c89fd68e4dddfaaa7f300ff0f41336ad2bb42a77b748ee8f80c83620c55564b1d839ab55ce798ee782cf09140540
- SSDEEP 3072:gaqbyj28JkuM+r9Kjb7v9eAi2tUO8gUIvmhqTSHkjKCGMu1ivJ1GII6:CV4iS927Pi2tUO8s+qTSHiG1FIr
- MD5 SHA1 SHA512 SSDEEP
com.tencent.qqpimsecure.plugin
Root·/zergRush
- SHA256 7665548a34de7b6089863fb9b6821af4a6e759ef5df3d074e50b9737d5971257
- MD5 3cf8a3fbceb667121d91f4ef1a66684c
- SHA1 d7f78393c81ce39b7b94a403ffac0f5c7bb39783
- SHA512 281e8f440424ee9831d6d19b9157f0af9fdd3f638fb86abb0a0349b1951d041a641e52f29a3be327ef8cba5ecaa24af7334129af92b29dde6c70b7042be7b87b
- SSDEEP 192:klpfAbk3CTsSWygfiCTtooD2Vsra3+TFK1NasjRc4p/IM7xXFqC6wKz5nin/O4rL:kNSTlNSD2VsW3tdc9I1F7KpM
- MD5 SHA1 SHA512 SSDEEP
Root·/˫Root.bat
- SHA256 7567933c82965efb17d42f6fa771822e4f682bb3da192d64173ea7c68f7b6df0
- MD5 b7f0fca5dea0db88a14643de94e0021f
- SHA1 75ca4472547aa33f3231a370235f9375c5065ce5
- SHA512 2c777021c87fd133fd86ab464f095f37239ba2a137f7b04942b160008f078d92daa99648d256fbafaee27687bc05256d4f93d96ff41be7a9b66563af486e95b8
- SSDEEP 48:ad5QR2PS23wU6o2ghYEdpm5q62b9g5a1Q4p0mhE19DEH75S4:aTQRx2v1o5qT9gM1BVhE19DEH1S4
- MD5 SHA1 SHA512 SSDEEP