search

darvincisec / DetectFrida

Detect Frida for Android
MIT License
665 stars 138 forks source link

Frida-Server is not running, but the memory manipulate log is recorded. #35

Open jhlee8804 opened 1 year ago

jhlee8804 commented 1 year ago

The FRIDA server is not executed on the device, the memory manipulate log is recorded.

As shown in the attached source, the detect_frida_threads, detect_frida_namedpipe, and detect_frida_memdiskcompare functions have been modified to force the app to shut down when they return true.

What is the problem?

---------------------------- PROCESS STARTED (19228) for package com.example.detectfrida ----------------------------
2023-03-01 23:52:42.394 19228-19228 DetectFrida             com.example.detectfrida       V  Libc[101][8][0][3][10b][23]
2023-03-01 23:52:42.402 19228-19272 DetectFrida             com.example.detectfrida       V  Map [7727e12ac000-7727e12b1000 r-xp 00000000 fe:21 65604                      /data/app/~~3F80LSYqQUTByzlCxdzskA==/com.example.detectfrida-2XZELj6s20OVLUKaFcJzkQ==/lib/x86_64/libdetectfrida.so]
2023-03-01 23:52:42.402 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[33588][33588]
2023-03-01 23:52:42.402 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[1660554][1660554]
2023-03-01 23:52:42.402 19228-19272 DetectFrida             com.example.detectfrida       V  Map [7727e12b1000-7727e12b2000 r--p 00004000 fe:21 65604                      /data/app/~~3F80LSYqQUTByzlCxdzskA==/com.example.detectfrida-2XZELj6s20OVLUKaFcJzkQ==/lib/x86_64/libdetectfrida.so]
2023-03-01 23:52:42.403 19228-19272 DetectFrida             com.example.detectfrida       V  Map [7727e12b2000-7727e12b3000 rw-p 00005000 fe:21 65604                      /data/app/~~3F80LSYqQUTByzlCxdzskA==/com.example.detectfrida-2XZELj6s20OVLUKaFcJzkQ==/lib/x86_64/libdetectfrida.so]
2023-03-01 23:52:42.466 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a48d000-772b0a4d1000 r--p 00000000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.467 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4d1000-772b0a4e8000 r-xp 00043000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.468 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[58445356][58689518]
2023-03-01 23:52:42.468 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.468 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[944815][934687]
2023-03-01 23:52:42.468 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.468 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4e8000-772b0a4e9000 rwxp 0005a000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.470 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[24476903][58689518]
2023-03-01 23:52:42.470 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.470 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.470 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.470 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4e9000-772b0a4ec000 r-xp 0005b000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.471 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[24105621][58689518]
2023-03-01 23:52:42.471 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.471 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.471 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.471 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4ec000-772b0a4ed000 rwxp 0005e000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.472 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[22942464][58689518]
2023-03-01 23:52:42.472 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.473 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.473 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.473 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4ed000-772b0a4ee000 r-xp 0005f000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.474 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[22495429][58689518]
2023-03-01 23:52:42.474 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.474 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.474 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.478 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4ee000-772b0a4ef000 rwxp 00060000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.479 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[22070342][58689518]
2023-03-01 23:52:42.480 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.480 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.480 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.480 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4ef000-772b0a4f0000 r-xp 00061000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.482 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[21700838][58689518]
2023-03-01 23:52:42.482 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.483 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.483 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.483 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4f0000-772b0a4f1000 rwxp 00062000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.484 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[21337756][58689518]
2023-03-01 23:52:42.484 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.484 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.485 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.486 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4f1000-772b0a4fa000 r-xp 00063000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.487 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[21000140][58689518]
2023-03-01 23:52:42.488 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.488 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.489 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.490 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4fa000-772b0a4fb000 rwxp 0006c000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.491 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[17488954][58689518]
2023-03-01 23:52:42.491 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.492 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.492 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.492 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4fb000-772b0a544000 r-xp 0006d000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.493 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[17078986][58689518]
2023-03-01 23:52:42.493 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.494 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.494 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.494 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a544000-772b0a546000 rwxp 000b6000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.495 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][58689518]
2023-03-01 23:52:42.495 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.495 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.495 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.495 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a546000-772b0a54f000 r-xp 000b8000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.496 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][58689518]
2023-03-01 23:52:42.496 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.496 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.496 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.496 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a54f000-772b0a550000 rwxp 000c1000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.497 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][58689518]
2023-03-01 23:52:42.497 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.497 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.497 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.497 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a550000-772b0a55d000 r-xp 000c2000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.499 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][58689518]
2023-03-01 23:52:42.499 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.499 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.500 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.500 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a55d000-772b0a55e000 rwxp 000cf000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.502 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][58689518]
2023-03-01 23:52:42.503 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.503 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.503 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.503 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a55e000-772b0a564000 r-xp 000d0000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.504 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][58689518]
2023-03-01 23:52:42.504 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.504 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:42.504 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:42.504 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a564000-772b0a569000 r--p 000d5000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:42.504 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a569000-772b0a56a000 rw-p 000d9000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
---------------------------- PROCESS STARTED (19280) for package com.example.detectfrida ----------------------------
2023-03-01 23:52:42.849 19228-19228 PluginManager           com.example.detectfrida       D  startupPlugins: put - DetectFridaPlugin
2023-03-01 23:52:47.546 19228-19272 DetectFrida             com.example.detectfrida       V  Map [7727e12ac000-7727e12b1000 r-xp 00000000 fe:21 65604                      /data/app/~~3F80LSYqQUTByzlCxdzskA==/com.example.detectfrida-2XZELj6s20OVLUKaFcJzkQ==/lib/x86_64/libdetectfrida.so]
2023-03-01 23:52:47.546 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[33588][33588]
2023-03-01 23:52:47.546 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[1660554][1660554]
2023-03-01 23:52:47.546 19228-19272 DetectFrida             com.example.detectfrida       V  Map [7727e12b1000-7727e12b2000 r--p 00004000 fe:21 65604                      /data/app/~~3F80LSYqQUTByzlCxdzskA==/com.example.detectfrida-2XZELj6s20OVLUKaFcJzkQ==/lib/x86_64/libdetectfrida.so]
2023-03-01 23:52:47.547 19228-19272 DetectFrida             com.example.detectfrida       V  Map [7727e12b2000-7727e12b3000 rw-p 00005000 fe:21 65604                      /data/app/~~3F80LSYqQUTByzlCxdzskA==/com.example.detectfrida-2XZELj6s20OVLUKaFcJzkQ==/lib/x86_64/libdetectfrida.so]
2023-03-01 23:52:47.585 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a48d000-772b0a4d1000 r--p 00000000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.585 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4d1000-772b0a4e8000 r-xp 00043000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.585 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[58445356][58689518]
2023-03-01 23:52:47.586 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.586 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[944815][934687]
2023-03-01 23:52:47.586 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.586 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4e8000-772b0a4e9000 rwxp 0005a000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.587 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[24516589][58689518]
2023-03-01 23:52:47.587 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.587 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:47.587 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.587 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4e9000-772b0a4ec000 r-xp 0005b000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.588 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[24145250][58689518]
2023-03-01 23:52:47.588 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.588 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:47.588 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.589 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4ec000-772b0a4ed000 rwxp 0005e000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.589 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[22982093][58689518]
2023-03-01 23:52:47.590 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.590 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:47.590 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.590 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4ed000-772b0a4ee000 r-xp 0005f000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.590 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[22535058][58689518]
2023-03-01 23:52:47.591 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.591 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:47.591 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.591 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4ee000-772b0a4ef000 rwxp 00060000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.591 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[22109971][58689518]
2023-03-01 23:52:47.591 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.591 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:47.591 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.592 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4ef000-772b0a4f0000 r-xp 00061000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.592 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[21740467][58689518]
2023-03-01 23:52:47.592 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.592 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:47.593 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.593 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4f0000-772b0a4f1000 rwxp 00062000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.594 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[21377385][58689518]
2023-03-01 23:52:47.594 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.594 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:47.594 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.594 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4f1000-772b0a4fa000 r-xp 00063000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.595 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[21041255][58689518]
2023-03-01 23:52:47.595 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.595 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
2023-03-01 23:52:47.595 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.596 19228-19272 DetectFrida             com.example.detectfrida       V  Map [772b0a4fa000-772b0a4fb000 rwxp 0006c000 07:48 21                         /apex/com.android.runtime/lib64/bionic/libc.so]
2023-03-01 23:52:47.597 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[17529477][58689518]
2023-03-01 23:52:47.597 19228-19272 DetectFrida             com.example.detectfrida       V  Executable Section Manipulated, maybe due to Frida or other hooking framework.Act Now!!!
2023-03-01 23:52:47.597 19228-19272 DetectFrida             com.example.detectfrida       V  Checksum:[0][934687]
jhlee8804 commented 1 year ago

Related to #31 .