771e05a0caa0822e6cda930d66447d00772c2ba36fe83e62154b6a0d76413b0e

Analysis

max time kernel
179s
max time network
183s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
24-05-2024 13:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Root_Checker_5.9.4.apk
Size

6.8MB
MD5

9e2eae5051f3834834a0346712bda07a
SHA1

2dc4aa2b57ce8ce580dbf642a0ed0cbefa015277
SHA256

771e05a0caa0822e6cda930d66447d00772c2ba36fe83e62154b6a0d76413b0e
SHA512

20e902044289f1bf11b6304dd91df1a0deb07955b1c7c6ab75fb2e89e4b0e81594f92585279c3acd7d790c37b72e92c512535ee48fda0eef0c69d1f0498542f7
SSDEEP

98304:s8ALShhdccY2qtJFUhK7W59Ddua60PNITWBnnY+qFsHYA2HKraYCpyV+5:ASfqd7t7UN5buaXNqG4pqrah

Score

8^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

T1426

Processes:

com.joeykrim.rootcheck

ioc process

/system/app/Superuser.apk com.joeykrim.rootcheck
/system/xbin/su com.joeykrim.rootcheck
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.joeykrim.rootcheck

description ioc process

File opened for read /proc/cpuinfo com.joeykrim.rootcheck
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.joeykrim.rootcheck

description ioc process

File opened for read /proc/meminfo com.joeykrim.rootcheck
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

T1407

Processes:

com.joeykrim.rootcheck

ioc pid process

/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar 5161 com.joeykrim.rootcheck
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.joeykrim.rootcheck
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

T1424

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.joeykrim.rootcheck
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

T1422

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.joeykrim.rootcheck
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.joeykrim.rootcheck
Acquires the wake lock 1 IoCs

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.joeykrim.rootcheck
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.joeykrim.rootcheck
Checks the presence of a debugger
evasion
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

T1471

Processes:

com.joeykrim.rootcheck

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.joeykrim.rootcheck

ioc	process
/system/app/Superuser.apk	com.joeykrim.rootcheck
/system/xbin/su	com.joeykrim.rootcheck

description	ioc	process
File opened for read	/proc/cpuinfo	com.joeykrim.rootcheck

description	ioc	process
File opened for read	/proc/meminfo	com.joeykrim.rootcheck

ioc	pid	process
/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar	5161	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.joeykrim.rootcheck

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joeykrim.rootcheck

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.joeykrim.rootcheck

com.joeykrim.rootcheck
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:5161

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
568B

MD5
88e87403afbd96642d571950f0a4d398

SHA1
227994bd82161950d10bd39ac64ca6a736ace52d

SHA256
6ade76ba6d5ff851aac2d09a9a75950123b7392d59717dd8fd8a4cb769d1bda3

SHA512
eccb961ddacd3d2563ef5847a5f9a13044052e3b9d2be50bfbb3065502d6c1429e03a4630ba28c9ce33a7e25295d84d6f1f10ab11441b919fc0e8a64e702597b

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
597B

MD5
e039fa9c9ca4c61d57949b652034183c

SHA1
627b2add890ac3d7d70debf2911b2435d7b924d5

SHA256
0d80860f730615aa9d893caa647d869d87ac92d7e96f71dffdf8d53d4108ffc6

SHA512
ec5b9da3d957c7f5aa31b0e61efe8980fb118292b600db013d9fb4128d3c853ccefe39f709f87485d8ded11ceac6a1f5d49cfb33309bccc21b21c7d7810cfd69

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
577B

MD5
fde54a4998f984c67b4a207b45da01e0

SHA1
6a79df5d0a3a37a5f22ca64e9a7f348bc656532a

SHA256
154ba9965f1f91b5e354ef58051cc1604fa354afeb3bced6bd3758baf6cfc52e

SHA512
27547ee57632e071ca46aa5a2f3344e0e0c610a75d2b3beb6381ab8aba0cd89f8b86553cbff9801555bd1cb3ea2d0a628e3269b1933c8e26d95a2e9294dfa20d

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
572B

MD5
efe1ec908131ccfd4699f68abee8914d

SHA1
003df4012de3fc6d6d17bf115317701abdd0aefe

SHA256
3cde343337bbda4297765662d3b1e3a727acadbf362efca80d5ffb48dcf2f27f

SHA512
6287ce40bccd796722cdaaa25ec4f0c65bda158a43e946dcc6df44365839093288fcfdbe7725bfc12d4eceaf8440085812d42ff20dda3dab942c33c17c55c75e

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
538B

MD5
034a8d2cbefd64d345918d06bc2a8498

SHA1
9b7588542132e1dc8d198075f12bb7d1fdd7902d

SHA256
cf9236b3c9ee1361c11811d0d1e177a28b7c890d15a13adb23aa22fc85486ed0

SHA512
e60b0d1935676439f766cdd695f982d78ce2f319a203593a4618dd1cf87d6b10f0f5c58e9a8404105b47d7aea3acf60c2a3c0e32e7e820382d2c1c8679bc7b8c

Download Submit
/data/data/com.joeykrim.rootcheck/app_febcf37b1b614b9dbd822fb2f448801e/events/eventsFile
Filesize
493B

MD5
5197e76fb8a01909b932593cdb4fa226

SHA1
9fe4e29ab929990f7fd561b7cafcfbb780da876a

SHA256
939e9e46e48952dc75f9d3923720cdb979e4e88dd92665c1285968702ae6cb6f

SHA512
bb16f74a7a50e309bb61cf910f74583207d559ffd7b60544ae64700ba6bb2d664f6c2ac7c3c1e41b02e86f1ecb5095380709a338a343b3e42914cedb9e7473d6

Download Submit
/data/data/com.joeykrim.rootcheck/app_febcf37b1b614b9dbd822fb2f448801e/events/eventsFile
Filesize
493B

MD5
a23ebad967fcf7dce05d6bce4ceaf864

SHA1
e74f775750fac25657afd48a03a163d9275738ed

SHA256
5b1ec4e2c05174d62accf1c26ff84dd56e9904a7dcc211a0d17256e9709a4794

SHA512
9bc0386f7ef57fb8a92e7131dbffc387f0480109e76779ea7a2b646410fe4f78c96f9ba6aa98fce219cd024dcbc9a966bb0426e0b75bcc626efcd33c8c478dea

Download Submit
/data/data/com.joeykrim.rootcheck/app_febcf37b1b614b9dbd822fb2f448801e/events/eventsFile
Filesize
601B

MD5
eac5c285eb6530e72bf4a4a27ce824ee

SHA1
ffa08d8e19519fa516bb86c23912bf29eef82606

SHA256
689061ecf1cbad0a6bd7f8b4acc796a938c5e1ab74c62e72e1b9d1bf4a6077ad

SHA512
6b2b3a288be4990bf7ac53a4b6a34d0dd8cdffd30e8709b730e6ea8354ca9fed75574e15c62c8d87d254d294a2cd0345c5c715ebe03945311b14a454ecebf746

Download Submit
/data/data/com.joeykrim.rootcheck/app_febcf37b1b614b9dbd822fb2f448801e/events/eventsFile
Filesize
601B

MD5
a7f84218fa2964a4e01563a26404922b

SHA1
11e632a204a90e3d5a96709e6c1d2083b246ee72

SHA256
b87aa172ef29ee5cdf7ee63fbe1ca66fa4a0df273dcdedaf48dec53b12e6b5b3

SHA512
8122fbf1aa24591304b1fdcba08b870e10d283a54fc3bb5b14477cc3c6c68431795ad5e59878c5273912d568ba69d1b4e6d22241581cc3bf61c295309a326353

Download Submit
/data/data/com.joeykrim.rootcheck/cache/1582435991586.jar
Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit
/data/data/com.joeykrim.rootcheck/cache/oat/1582435991586.jar.cur.prof
Filesize
90B

MD5
3b916c48baf9e10b03320cb4ed75654c

SHA1
3b950676c3952c8a21c7f4b900c277695440a4bb

SHA256
78b3d8163fa00e6656c09fbc867303fea21dec316ef9377e396b758f4bb3bfc4

SHA512
8546b7219d8aad54569c150f7155f161cc6d7fbfeaebc725c1a6207f0f0e9ffb59b7b3acd96ed7327d918ae6b66d2be37789bbd73553eac663d1b2f44b95b379

Download Submit
/data/data/com.joeykrim.rootcheck/cache/volley/-139605349995085421
Filesize
78KB

MD5
8c74effe2c29c66b7a36899b0a7e755c

SHA1
e7d7c5783fead1310c1416c01b3e3692cce1585d

SHA256
45d225f70f92f24b32d73d3ec0b0fb2167672c069ea2631a9e29a211461c3852

SHA512
ddacefe00d24d4cb61e37e1c06f7c813b08f6fe8d8245e39931abc8a4bec1f0ed5f7b21d6871f6f93f9af02005113ee5d8da9d2af5a5a1d4ceccc6f4c0914be7

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db
Filesize
28KB

MD5
532d5cbf539f37aec0e02b1cecc25b67

SHA1
198fcaaea12fbe5c68c95b5e5201cad541003c6a

SHA256
43469f9768697e1f42eeb2b3c15005380b634b5dc18e0682727c95c3832aafed

SHA512
e0bb54f6340c3f98ba5801c7d58cc4ef4fdeeb4df59f7de7743fbdabe6f641b7ba15a2e91098188f06deb1ae00a2400aeaa67e449d2e9a526bc0fa6c134ba798

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
512B

MD5
049d0d9a6760db99c06fbfe63bcb0caa

SHA1
226985369c21db7d2a59978c05bcd5b55623ff6c

SHA256
c21effaebd86e9a8be6e030c2115baab996e3522486c4078cd0d7ec39a5487fd

SHA512
61681742c0bd8f0cb89f4fc073dd5d6d48f4d603dff8de13263e1396453362322e2cbd571c4ab5efe7863d5c1d8b3ba949288c1b16833c8eba18ee83250219dc

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
ac2c060fd56f86c9f0ea70cc99f58a48

SHA1
a6ef7579fee195799b0e7b25f7dfd5748d2096d1

SHA256
ef503ea9aaff2d73b5ed0c42e64d087d68ee537d1c06367dbfc46b28211fc473

SHA512
c7f077c3988bde0633eceacfec2826650f74ec7b5db54199159cd434aa6596648859752a7fccd2742987fe3b052186e0911fbb8a9bb9c48e673b3c3dfe328455

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
4KB

MD5
b7113d0b6ee68c72a244c737666d7bd5

SHA1
ffbbfc292f58b5ba5433d93ce67e664fd11780dc

SHA256
3264c02019073a673a7c13c470792f1d27113ea09df707453af1a810feb94ec7

SHA512
d6d166bf45eb42f1b1db2f08530c06a337d68257126d90b3091cec468e15f0a6104369d5da2a9c94ea37ba30c5aebb9bc7ef4b9ce0e176698432f1c449254433

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
0386097d77589f195f72c63fc29abe23

SHA1
cbbff07ae45a1a58f08a4ab3e12d99df18f107d5

SHA256
8dd5547e5139eb53bf3ef864ff091e3abb0f312ffb3306f4da47a897e373daaf

SHA512
048a2c4e10354837ead0c778e775b7b029a28d1cb001640a89934ccd8359680a1c2d958e781358a3473f87d5788e58e73aebea33d7405545ebe17bbbe9bb2775

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
803d8e49fc4fa0d89cd77e8d50cb55f6

SHA1
e26d9f27290dca6aa1d0dc5eb73276e9cd0cfe2a

SHA256
f890a68e5b2993b08e32c5e4a60421e38872892defab44e5dc7ea860820e0d44

SHA512
2120c7ba4188fedca9a16159dbea7ad8db7cb4ae58b1bab3096173a4eb213d4c0c060acafd5e7e5d085628ec1e9a80b261a8280aa97c7bf954b8922830a419f9

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
12KB

MD5
ee9ced9ba593133570ae75822dfcfb4e

SHA1
25b86eae00d12ae649028ed0635213f846674556

SHA256
de1c8585d9051254fec1105df40dabcc9b5291f881506772c64bd213458579b8

SHA512
d3772468af365a54aa803f74625cd6ea1161a95a1f027839b68dedc2406c736f0cbe52f94ff1faedf8d3edd2a813b2418c071c3e9deaeb6ae52440319b05f42a

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/665093B301CB-0001-1429-431CF20581F6BeginSession.cls_temp
Filesize
77B

MD5
3e5b8b7f67f96b2ea23dc529936f2cd8

SHA1
7404bdd4455a548739de08d475a8da49690a6224

SHA256
d8328dce5e5f299e08948b0f86f5498b2bab166ec75d855a57720fecb5629020

SHA512
aa3ded5750eb4784bffa2d7232ac6f52791df08061bb29c7abb4f2c0fe459ae2f3887b707bdb418c369eb9bd8e1693ff7de61c66e22e0ad116dc2d429fea78c3

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/665093B301CB-0001-1429-431CF20581F6SessionApp.cls_temp
Filesize
118B

MD5
d8f4d5fea184e18d7d8d4c6c45ceb9c5

SHA1
b6dc9c70c7f0834f487da56ada677b19748411e4

SHA256
b9aa8bad79985f683d502c3352d77363b6ab9774d7a93263bf5e64e9a2e1810b

SHA512
d7edc8462354e7314d0aa9224a3c166502f5bc5419e1976c99f0fd9bb4535e8b3694f41d907be313dfe66fd8d34ba6d46aa7d01fa15018a28a876d2aa610b283

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/665093B301CB-0001-1429-431CF20581F6SessionDevice.cls_temp
Filesize
131B

MD5
65071591c4e70b83abf2e4f142aebcc6

SHA1
eb7831e2d478700399f64d81a3f97da2c0562bc5

SHA256
fdd8500568cf608e69b845c868e2b2720f5534fb1a036791b98b6b3e0e081b41

SHA512
bb197ae7c4f17583392dc36e21b2eb77d0edfcb15496de52dd8d418678932707d3ab0f659a0403d9354100b5edf825813bc4639cfd7aaf701636febd85430e5e

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/665093B301CB-0001-1429-431CF20581F6SessionOS.cls_temp
Filesize
15B

MD5
2566d27ce8c28d8961f082c375d7535e

SHA1
92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf

SHA256
5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a

SHA512
1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
541B

MD5
895728ed9e3c320053557f47bb67763f

SHA1
5886a2e02540f6cb0831c1dd33c88515ed60e693

SHA256
6b467b564fffdf61a6027fd3696ebf9d98bbb14ce7e3e802fe094d3b27969ec2

SHA512
ace035aec61d5e72fabe3ca2c736e0bde6bed03fc834e7e24d507c14d24f6a8af3ba65b9c98ffe1d9bda75faf351aefb0ecbe7008e957384eac392844de4dc26

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
1KB

MD5
1f7b7cd0ff8894b9f8d93e38b945bea2

SHA1
08ee9e36f4c8fdc1ee797324db90d40a4edc68f7

SHA256
9bb205e78c67b9fb14f562ba38021848bfdb3c10b27bd819e6fa029908977683

SHA512
f7665fd2176964c664202418c30ae9c5b07278b7671aee7b62c4b1b23e855dfe14f156366664926df54d1b0986e8e5c02586a009afd657df763664db4e5de74c

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_74099593-fe05-40a1-a900-eaa1bb1f1177_1716556732718.tap
Filesize
412B

MD5
d74e881198aa4cb533db4e8b9b12f7b7

SHA1
3b969fd5d74a8005110d1ee2b01c5554a2916978

SHA256
820cb250f00ee044d5463538bb51e2f896ce0780913ed532ac885842b2470d84

SHA512
e187b6ef341dba6fa0cbcc92e6dee38b367188065494f3018a79ddbff4999d7653733cc364c8d2443af860c4c057084df84366975f63834be4b812ca9cdfe312

Download Submit
/data/data/com.joeykrim.rootcheck/files/.YFlurrySenderIndex.info.AnalyticsData_RG6P5WWKVXRC8CPTJZJT_211
Filesize
88B

MD5
25dc8dcd5cca959fba4534f449903c61

SHA1
30990f3bb1687a1da6ad480ecad303457b162ea2

SHA256
0c8b85476fa7b0c880fdd22977d8125766d25513e985fab764d35c8d9ca27bbf

SHA512
dd50ef5d7123890c7bd010eff0b2d9a4ca1d1eb03c0389373745fded630e7ca5b870d85b5588d88a197c19136f9609b999f71f61dbaae774e46bacf5fcdc703f

Download Submit
/data/data/com.joeykrim.rootcheck/files/.YFlurrySenderIndex.info.AnalyticsMain
Filesize
72B

MD5
9d52b65d0631d3dfff877c5bf56a8440

SHA1
9d66929722fd30153a57e30f0f68f17380e2b0e1

SHA256
36936bb994843fbb0b91fad190471623a66ccd059f85ccbeed8d755d4fb3c98f

SHA512
170cfdd8ac8959e0fbe9a261cef3c5c7a0848b426c9cb6eb2fe0dd296d1d71bc6e1c8348d5c887c69ef1c312f711df4cee402ab9ffd3da0f88801d018a3444e7

Download Submit
/data/data/com.joeykrim.rootcheck/files/.flurryads.mediaassets.tmp
Filesize
47KB

MD5
b1103646d24069bcfcb1659f5f1b3b86

SHA1
568f75908f642bb0da55acfbdd012053a3b1250d

SHA256
fd1d61e836c8bd581556ea37d575bb553b8edbf167e757930a41ea65dc99a5ac

SHA512
4f8ab1104bef96497aafb612c057b0e04659b9d40ae355263cdf0a90be6425580ef94297a87d79547124a2b2f0c8bff60e0ec012f5e9f25a9b23769bccedab83

Download Submit
/data/data/com.joeykrim.rootcheck/files/.yflurrydatasenderblock.4b13344a-bc9a-4468-8320-0d4141c6c8de
Filesize
307B

MD5
4d6712b3a56fc38ba91d535d4ea8a0d2

SHA1
aaf00ad4e97c6bb7e90a3937cf0f5da9908be6db

SHA256
286aa0e8fee5ebf0a8bcbc569b31567567fe2e5134d016d94195949afc08dc35

SHA512
59d34157849742852e076713da9c0ea3b149e9d3dd5eb725234b4647a26407f3f2b90fd2d9b7449a1c49921144ea50776c72eabe24bbf4aac892d3b2d4d3395f

Download Submit
/data/data/com.joeykrim.rootcheck/files/AppEventsLogger.persistedsessioninfo
Filesize
495B

MD5
2e22123da143a308d2aab0bee4c3f450

SHA1
03e73210adf84e1dd1ed3f47f74900a76300050d

SHA256
23693f3d0aee71c5d7667521c9887efa883dad3a52c541d2a69a0becc98e1e46

SHA512
9d3d7c015ab5517a319541e3ab219f1f65e3cb8b3b401d7669e94c47745b89d886cd4182777d4afc96c146eeb0cd3a83c801ae971e972bfb26fb143bb2436d2d

Download Submit
/data/data/com.joeykrim.rootcheck/files/gaClientId
Filesize
36B

MD5
1d9b6888b7573735db93e72f3ec4a8c4

SHA1
097e064fae2f626f37f48eda972b7ac9e416d2b6

SHA256
3be9ff0b9004e324b6129b77938230acbc76df4ca4bd7058e50789d489aaba40

SHA512
0db3ba0abdfb3d4f9f2130c68c37b97bd67d516a0f152b45e12b8e7d9b057061f6de702d5dd724ef4c66e41086324859651007ee66a473bd1a7a91a99eb1ec8a

Download Submit
/data/data/com.joeykrim.rootcheck/files/gaClientIdData
Filesize
32B

MD5
04cf692919b44364dab0b32ccb1ea11f

SHA1
5583d68c817f81af8bda6c60841ff30b6bc68080

SHA256
7732d0110e25a3fa394a4c368c0cc38385aedbeb40d1170cd3c3e6fc98f6df8a

SHA512
7ee6957034e493761a4dea91e9827420266a4e06066ed713dc93c374e160c1fe1773f59e24eca551add0f218baceca3b337c37f13b035ede7e969a456c41caf0

Download Submit
/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar
Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit
/storage/emulated/0/Android/data/com.joeykrim.rootcheck/cache/.fcaches/fileStreamCacheDownloader/journal.tmp
Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads