I have a Samsung Galaxy S7 with latest official Android for that phone installed. There are some files whose names worry me in my internal storage root directory, namely aavpsgdgfgdgfwsvmh999.dat, aavpsgdgf999.dat, which when opened, contain some hashes - length 24 bytes each - inside them. Do you know what they might be of and if they hint towards a virus? Could they be of a recent Android upgrade I did?

  • I assume that for root directory you mean /. Are these hashes of the same length? How long are they? – Grimoire Aug 26 '17 at 15:26
  • @deathmasksalesman Yes, they do have the same length, but those aren't the same hashes and they are in Base64 recognised by their "=" padding. All files have a 24-byte size. Also, for root directory, I mean the one visible from the Windows MTP service. – Jason Aug 27 '17 at 13:47
  • This is definitely crearer, thanks. You may want to update your question to reflect the new details. Now, what MTP sees is the /storage/emulated/0 (aka internal storage). Did you already try to parse the Base64? – Grimoire Aug 27 '17 at 18:16
  • @deathmasksalesman Yes, no useful info, just some (seemingly) useless bytes... – Jason Aug 27 '17 at 21:28
  • Deleting the files makes them respawn? – Grimoire Aug 28 '17 at 10:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.