771e05a0caa0822e6cda930d66447d00772c2ba36fe83e62154b6a0d76413b0e

Analysis

max time kernel
179s
max time network
183s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
24-05-2024 13:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Root_Checker_5.9.4.apk
Size

6.8MB
MD5

9e2eae5051f3834834a0346712bda07a
SHA1

2dc4aa2b57ce8ce580dbf642a0ed0cbefa015277
SHA256

771e05a0caa0822e6cda930d66447d00772c2ba36fe83e62154b6a0d76413b0e
SHA512

20e902044289f1bf11b6304dd91df1a0deb07955b1c7c6ab75fb2e89e4b0e81594f92585279c3acd7d790c37b72e92c512535ee48fda0eef0c69d1f0498542f7
SSDEEP

98304:s8ALShhdccY2qtJFUhK7W59Ddua60PNITWBnnY+qFsHYA2HKraYCpyV+5:ASfqd7t7UN5buaXNqG4pqrah

Score

8^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

ioc process

/system/app/Superuser.apk com.joeykrim.rootcheck
/system/xbin/su com.joeykrim.rootcheck
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

description ioc process

File opened for read /proc/cpuinfo com.joeykrim.rootcheck
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

description ioc process

File opened for read /proc/meminfo com.joeykrim.rootcheck
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

Download New Code at Runtime
T1407

Processes:

com.joeykrim.rootcheck

ioc pid process

/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar 5161 com.joeykrim.rootcheck
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.joeykrim.rootcheck
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.joeykrim.rootcheck
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.joeykrim.rootcheck
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.joeykrim.rootcheck
Acquires the wake lock 1 IoCs

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.joeykrim.rootcheck
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.joeykrim.rootcheck
Checks the presence of a debugger
evasion
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.joeykrim.rootcheck

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.joeykrim.rootcheck

ioc	process
/system/app/Superuser.apk	com.joeykrim.rootcheck
/system/xbin/su	com.joeykrim.rootcheck

description	ioc	process
File opened for read	/proc/cpuinfo	com.joeykrim.rootcheck

description	ioc	process
File opened for read	/proc/meminfo	com.joeykrim.rootcheck

ioc	pid	process
/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar	5161	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.joeykrim.rootcheck

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joeykrim.rootcheck

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.joeykrim.rootcheck

com.joeykrim.rootcheck
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5161

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile

Filesize
568B

MD5
88e87403afbd96642d571950f0a4d398

SHA1
227994bd82161950d10bd39ac64ca6a736ace52d

SHA256
6ade76ba6d5ff851aac2d09a9a75950123b7392d59717dd8fd8a4cb769d1bda3

SHA512
eccb961ddacd3d2563ef5847a5f9a13044052e3b9d2be50bfbb3065502d6c1429e03a4630ba28c9ce33a7e25295d84d6f1f10ab11441b919fc0e8a64e702597b

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile

Filesize
597B

MD5
e039fa9c9ca4c61d57949b652034183c

SHA1
627b2add890ac3d7d70debf2911b2435d7b924d5

SHA256
0d80860f730615aa9d893caa647d869d87ac92d7e96f71dffdf8d53d4108ffc6

SHA512
ec5b9da3d957c7f5aa31b0e61efe8980fb118292b600db013d9fb4128d3c853ccefe39f709f87485d8ded11ceac6a1f5d49cfb33309bccc21b21c7d7810cfd69

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile

Filesize
577B

MD5
fde54a4998f984c67b4a207b45da01e0

SHA1
6a79df5d0a3a37a5f22ca64e9a7f348bc656532a

SHA256
154ba9965f1f91b5e354ef58051cc1604fa354afeb3bced6bd3758baf6cfc52e

SHA512
27547ee57632e071ca46aa5a2f3344e0e0c610a75d2b3beb6381ab8aba0cd89f8b86553cbff9801555bd1cb3ea2d0a628e3269b1933c8e26d95a2e9294dfa20d

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile

Filesize
572B

MD5
efe1ec908131ccfd4699f68abee8914d

SHA1
003df4012de3fc6d6d17bf115317701abdd0aefe

SHA256
3cde343337bbda4297765662d3b1e3a727acadbf362efca80d5ffb48dcf2f27f

SHA512
6287ce40bccd796722cdaaa25ec4f0c65bda158a43e946dcc6df44365839093288fcfdbe7725bfc12d4eceaf8440085812d42ff20dda3dab942c33c17c55c75e

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile

Filesize
538B

MD5
034a8d2cbefd64d345918d06bc2a8498

SHA1
9b7588542132e1dc8d198075f12bb7d1fdd7902d

SHA256
cf9236b3c9ee1361c11811d0d1e177a28b7c890d15a13adb23aa22fc85486ed0

SHA512
e60b0d1935676439f766cdd695f982d78ce2f319a203593a4618dd1cf87d6b10f0f5c58e9a8404105b47d7aea3acf60c2a3c0e32e7e820382d2c1c8679bc7b8c

Download Submit
/data/data/com.joeykrim.rootcheck/app_febcf37b1b614b9dbd822fb2f448801e/events/eventsFile

Filesize
493B

MD5
5197e76fb8a01909b932593cdb4fa226

SHA1
9fe4e29ab929990f7fd561b7cafcfbb780da876a

SHA256
939e9e46e48952dc75f9d3923720cdb979e4e88dd92665c1285968702ae6cb6f

SHA512
bb16f74a7a50e309bb61cf910f74583207d559ffd7b60544ae64700ba6bb2d664f6c2ac7c3c1e41b02e86f1ecb5095380709a338a343b3e42914cedb9e7473d6

Download Submit
/data/data/com.joeykrim.rootcheck/app_febcf37b1b614b9dbd822fb2f448801e/events/eventsFile

Filesize
493B

MD5
a23ebad967fcf7dce05d6bce4ceaf864

SHA1
e74f775750fac25657afd48a03a163d9275738ed

SHA256
5b1ec4e2c05174d62accf1c26ff84dd56e9904a7dcc211a0d17256e9709a4794

SHA512
9bc0386f7ef57fb8a92e7131dbffc387f0480109e76779ea7a2b646410fe4f78c96f9ba6aa98fce219cd024dcbc9a966bb0426e0b75bcc626efcd33c8c478dea

Download Submit
/data/data/com.joeykrim.rootcheck/app_febcf37b1b614b9dbd822fb2f448801e/events/eventsFile

Filesize
601B

MD5
eac5c285eb6530e72bf4a4a27ce824ee

SHA1
ffa08d8e19519fa516bb86c23912bf29eef82606

SHA256
689061ecf1cbad0a6bd7f8b4acc796a938c5e1ab74c62e72e1b9d1bf4a6077ad

SHA512
6b2b3a288be4990bf7ac53a4b6a34d0dd8cdffd30e8709b730e6ea8354ca9fed75574e15c62c8d87d254d294a2cd0345c5c715ebe03945311b14a454ecebf746

Download Submit
/data/data/com.joeykrim.rootcheck/app_febcf37b1b614b9dbd822fb2f448801e/events/eventsFile

Filesize
601B

MD5
a7f84218fa2964a4e01563a26404922b

SHA1
11e632a204a90e3d5a96709e6c1d2083b246ee72

SHA256
b87aa172ef29ee5cdf7ee63fbe1ca66fa4a0df273dcdedaf48dec53b12e6b5b3

SHA512
8122fbf1aa24591304b1fdcba08b870e10d283a54fc3bb5b14477cc3c6c68431795ad5e59878c5273912d568ba69d1b4e6d22241581cc3bf61c295309a326353

Download Submit
/data/data/com.joeykrim.rootcheck/cache/1582435991586.jar

Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit
/data/data/com.joeykrim.rootcheck/cache/oat/1582435991586.jar.cur.prof

Filesize
90B

MD5
3b916c48baf9e10b03320cb4ed75654c

SHA1
3b950676c3952c8a21c7f4b900c277695440a4bb

SHA256
78b3d8163fa00e6656c09fbc867303fea21dec316ef9377e396b758f4bb3bfc4

SHA512
8546b7219d8aad54569c150f7155f161cc6d7fbfeaebc725c1a6207f0f0e9ffb59b7b3acd96ed7327d918ae6b66d2be37789bbd73553eac663d1b2f44b95b379

Download Submit
/data/data/com.joeykrim.rootcheck/cache/volley/-139605349995085421

Filesize
78KB

MD5
8c74effe2c29c66b7a36899b0a7e755c

SHA1
e7d7c5783fead1310c1416c01b3e3692cce1585d

SHA256
45d225f70f92f24b32d73d3ec0b0fb2167672c069ea2631a9e29a211461c3852

SHA512
ddacefe00d24d4cb61e37e1c06f7c813b08f6fe8d8245e39931abc8a4bec1f0ed5f7b21d6871f6f93f9af02005113ee5d8da9d2af5a5a1d4ceccc6f4c0914be7

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db

Filesize
28KB

MD5
532d5cbf539f37aec0e02b1cecc25b67

SHA1
198fcaaea12fbe5c68c95b5e5201cad541003c6a

SHA256
43469f9768697e1f42eeb2b3c15005380b634b5dc18e0682727c95c3832aafed

SHA512
e0bb54f6340c3f98ba5801c7d58cc4ef4fdeeb4df59f7de7743fbdabe6f641b7ba15a2e91098188f06deb1ae00a2400aeaa67e449d2e9a526bc0fa6c134ba798

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal

Filesize
512B

MD5
049d0d9a6760db99c06fbfe63bcb0caa

SHA1
226985369c21db7d2a59978c05bcd5b55623ff6c

SHA256
c21effaebd86e9a8be6e030c2115baab996e3522486c4078cd0d7ec39a5487fd

SHA512
61681742c0bd8f0cb89f4fc073dd5d6d48f4d603dff8de13263e1396453362322e2cbd571c4ab5efe7863d5c1d8b3ba949288c1b16833c8eba18ee83250219dc

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal

Filesize
8KB

MD5
ac2c060fd56f86c9f0ea70cc99f58a48

SHA1
a6ef7579fee195799b0e7b25f7dfd5748d2096d1

SHA256
ef503ea9aaff2d73b5ed0c42e64d087d68ee537d1c06367dbfc46b28211fc473

SHA512
c7f077c3988bde0633eceacfec2826650f74ec7b5db54199159cd434aa6596648859752a7fccd2742987fe3b052186e0911fbb8a9bb9c48e673b3c3dfe328455

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal

Filesize
4KB

MD5
b7113d0b6ee68c72a244c737666d7bd5

SHA1
ffbbfc292f58b5ba5433d93ce67e664fd11780dc

SHA256
3264c02019073a673a7c13c470792f1d27113ea09df707453af1a810feb94ec7

SHA512
d6d166bf45eb42f1b1db2f08530c06a337d68257126d90b3091cec468e15f0a6104369d5da2a9c94ea37ba30c5aebb9bc7ef4b9ce0e176698432f1c449254433

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal

Filesize
8KB

MD5
0386097d77589f195f72c63fc29abe23

SHA1
cbbff07ae45a1a58f08a4ab3e12d99df18f107d5

SHA256
8dd5547e5139eb53bf3ef864ff091e3abb0f312ffb3306f4da47a897e373daaf

SHA512
048a2c4e10354837ead0c778e775b7b029a28d1cb001640a89934ccd8359680a1c2d958e781358a3473f87d5788e58e73aebea33d7405545ebe17bbbe9bb2775

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal

Filesize
8KB

MD5
803d8e49fc4fa0d89cd77e8d50cb55f6

SHA1
e26d9f27290dca6aa1d0dc5eb73276e9cd0cfe2a

SHA256
f890a68e5b2993b08e32c5e4a60421e38872892defab44e5dc7ea860820e0d44

SHA512
2120c7ba4188fedca9a16159dbea7ad8db7cb4ae58b1bab3096173a4eb213d4c0c060acafd5e7e5d085628ec1e9a80b261a8280aa97c7bf954b8922830a419f9

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal

Filesize
12KB

MD5
ee9ced9ba593133570ae75822dfcfb4e

SHA1
25b86eae00d12ae649028ed0635213f846674556

SHA256
de1c8585d9051254fec1105df40dabcc9b5291f881506772c64bd213458579b8

SHA512
d3772468af365a54aa803f74625cd6ea1161a95a1f027839b68dedc2406c736f0cbe52f94ff1faedf8d3edd2a813b2418c071c3e9deaeb6ae52440319b05f42a

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/665093B301CB-0001-1429-431CF20581F6BeginSession.cls_temp

Filesize
77B

MD5
3e5b8b7f67f96b2ea23dc529936f2cd8

SHA1
7404bdd4455a548739de08d475a8da49690a6224

SHA256
d8328dce5e5f299e08948b0f86f5498b2bab166ec75d855a57720fecb5629020

SHA512
aa3ded5750eb4784bffa2d7232ac6f52791df08061bb29c7abb4f2c0fe459ae2f3887b707bdb418c369eb9bd8e1693ff7de61c66e22e0ad116dc2d429fea78c3

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/665093B301CB-0001-1429-431CF20581F6SessionApp.cls_temp

Filesize
118B

MD5
d8f4d5fea184e18d7d8d4c6c45ceb9c5

SHA1
b6dc9c70c7f0834f487da56ada677b19748411e4

SHA256
b9aa8bad79985f683d502c3352d77363b6ab9774d7a93263bf5e64e9a2e1810b

SHA512
d7edc8462354e7314d0aa9224a3c166502f5bc5419e1976c99f0fd9bb4535e8b3694f41d907be313dfe66fd8d34ba6d46aa7d01fa15018a28a876d2aa610b283

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/665093B301CB-0001-1429-431CF20581F6SessionDevice.cls_temp

Filesize
131B

MD5
65071591c4e70b83abf2e4f142aebcc6

SHA1
eb7831e2d478700399f64d81a3f97da2c0562bc5

SHA256
fdd8500568cf608e69b845c868e2b2720f5534fb1a036791b98b6b3e0e081b41

SHA512
bb197ae7c4f17583392dc36e21b2eb77d0edfcb15496de52dd8d418678932707d3ab0f659a0403d9354100b5edf825813bc4639cfd7aaf701636febd85430e5e

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/665093B301CB-0001-1429-431CF20581F6SessionOS.cls_temp

Filesize
15B

MD5
2566d27ce8c28d8961f082c375d7535e

SHA1
92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf

SHA256
5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a

SHA512
1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
541B

MD5
895728ed9e3c320053557f47bb67763f

SHA1
5886a2e02540f6cb0831c1dd33c88515ed60e693

SHA256
6b467b564fffdf61a6027fd3696ebf9d98bbb14ce7e3e802fe094d3b27969ec2

SHA512
ace035aec61d5e72fabe3ca2c736e0bde6bed03fc834e7e24d507c14d24f6a8af3ba65b9c98ffe1d9bda75faf351aefb0ecbe7008e957384eac392844de4dc26

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
1KB

MD5
1f7b7cd0ff8894b9f8d93e38b945bea2

SHA1
08ee9e36f4c8fdc1ee797324db90d40a4edc68f7

SHA256
9bb205e78c67b9fb14f562ba38021848bfdb3c10b27bd819e6fa029908977683

SHA512
f7665fd2176964c664202418c30ae9c5b07278b7671aee7b62c4b1b23e855dfe14f156366664926df54d1b0986e8e5c02586a009afd657df763664db4e5de74c

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_74099593-fe05-40a1-a900-eaa1bb1f1177_1716556732718.tap

Filesize
412B

MD5
d74e881198aa4cb533db4e8b9b12f7b7

SHA1
3b969fd5d74a8005110d1ee2b01c5554a2916978

SHA256
820cb250f00ee044d5463538bb51e2f896ce0780913ed532ac885842b2470d84

SHA512
e187b6ef341dba6fa0cbcc92e6dee38b367188065494f3018a79ddbff4999d7653733cc364c8d2443af860c4c057084df84366975f63834be4b812ca9cdfe312

Download Submit
/data/data/com.joeykrim.rootcheck/files/.YFlurrySenderIndex.info.AnalyticsData_RG6P5WWKVXRC8CPTJZJT_211

Filesize
88B

MD5
25dc8dcd5cca959fba4534f449903c61

SHA1
30990f3bb1687a1da6ad480ecad303457b162ea2

SHA256
0c8b85476fa7b0c880fdd22977d8125766d25513e985fab764d35c8d9ca27bbf

SHA512
dd50ef5d7123890c7bd010eff0b2d9a4ca1d1eb03c0389373745fded630e7ca5b870d85b5588d88a197c19136f9609b999f71f61dbaae774e46bacf5fcdc703f

Download Submit
/data/data/com.joeykrim.rootcheck/files/.YFlurrySenderIndex.info.AnalyticsMain

Filesize
72B

MD5
9d52b65d0631d3dfff877c5bf56a8440

SHA1
9d66929722fd30153a57e30f0f68f17380e2b0e1

SHA256
36936bb994843fbb0b91fad190471623a66ccd059f85ccbeed8d755d4fb3c98f

SHA512
170cfdd8ac8959e0fbe9a261cef3c5c7a0848b426c9cb6eb2fe0dd296d1d71bc6e1c8348d5c887c69ef1c312f711df4cee402ab9ffd3da0f88801d018a3444e7

Download Submit
/data/data/com.joeykrim.rootcheck/files/.flurryads.mediaassets.tmp

Filesize
47KB

MD5
b1103646d24069bcfcb1659f5f1b3b86

SHA1
568f75908f642bb0da55acfbdd012053a3b1250d

SHA256
fd1d61e836c8bd581556ea37d575bb553b8edbf167e757930a41ea65dc99a5ac

SHA512
4f8ab1104bef96497aafb612c057b0e04659b9d40ae355263cdf0a90be6425580ef94297a87d79547124a2b2f0c8bff60e0ec012f5e9f25a9b23769bccedab83

Download Submit
/data/data/com.joeykrim.rootcheck/files/.yflurrydatasenderblock.4b13344a-bc9a-4468-8320-0d4141c6c8de

Filesize
307B

MD5
4d6712b3a56fc38ba91d535d4ea8a0d2

SHA1
aaf00ad4e97c6bb7e90a3937cf0f5da9908be6db

SHA256
286aa0e8fee5ebf0a8bcbc569b31567567fe2e5134d016d94195949afc08dc35

SHA512
59d34157849742852e076713da9c0ea3b149e9d3dd5eb725234b4647a26407f3f2b90fd2d9b7449a1c49921144ea50776c72eabe24bbf4aac892d3b2d4d3395f

Download Submit
/data/data/com.joeykrim.rootcheck/files/AppEventsLogger.persistedsessioninfo

Filesize
495B

MD5
2e22123da143a308d2aab0bee4c3f450

SHA1
03e73210adf84e1dd1ed3f47f74900a76300050d

SHA256
23693f3d0aee71c5d7667521c9887efa883dad3a52c541d2a69a0becc98e1e46

SHA512
9d3d7c015ab5517a319541e3ab219f1f65e3cb8b3b401d7669e94c47745b89d886cd4182777d4afc96c146eeb0cd3a83c801ae971e972bfb26fb143bb2436d2d

Download Submit
/data/data/com.joeykrim.rootcheck/files/gaClientId

Filesize
36B

MD5
1d9b6888b7573735db93e72f3ec4a8c4

SHA1
097e064fae2f626f37f48eda972b7ac9e416d2b6

SHA256
3be9ff0b9004e324b6129b77938230acbc76df4ca4bd7058e50789d489aaba40

SHA512
0db3ba0abdfb3d4f9f2130c68c37b97bd67d516a0f152b45e12b8e7d9b057061f6de702d5dd724ef4c66e41086324859651007ee66a473bd1a7a91a99eb1ec8a

Download Submit
/data/data/com.joeykrim.rootcheck/files/gaClientIdData

Filesize
32B

MD5
04cf692919b44364dab0b32ccb1ea11f

SHA1
5583d68c817f81af8bda6c60841ff30b6bc68080

SHA256
7732d0110e25a3fa394a4c368c0cc38385aedbeb40d1170cd3c3e6fc98f6df8a

SHA512
7ee6957034e493761a4dea91e9827420266a4e06066ed713dc93c374e160c1fe1773f59e24eca551add0f218baceca3b337c37f13b035ede7e969a456c41caf0

Download Submit
/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar

Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit
/storage/emulated/0/Android/data/com.joeykrim.rootcheck/cache/.fcaches/fileStreamCacheDownloader/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit