This phone never been rooted.
During a full physical extraction on cellebrite UFED touch, PA v 5.3.67 found 3 hits.
has anyone seen these before
1. com.samsung.music-1.apk
Found in userdata (ExtX)/Root/app/com.samsung.music-1.apk
2. downloadfile.apk
Found in userdata (ExtX)/Root/data/com.android.providers.downloads/cache/downloadfile.apk
3. MobileTrackerEngineTwo.apk
Found in system (ExtX)/Root/app/MobileTrackerEngineTwo/MobileTrackerEngineTwo.apk
#1 Research seems to indicated it was a stock program. I have a identical model phone that has been used for tests prior, that had heavy usage. and it does NOT have this item. I have not checked firmware or release info on my test unit, so it may just be a different release from verizon.
#2 Research indicates it is google related and not necessarily malware. Possible tied to android market update.
#3 Jut began checking, but possible realted to https://mobile-tracker-free.com/ based on who offering the .apk for download. However a few android boards indicate it is part of the operating system to track lot phone. (I am doubting that since it is not on my ol note3 ( that was actually mine)
Any thoughts or experience?
Research based on filename only seems to me like a tad bit "vague" and prone to any possible false positive (or false negative) + 1. ?
jaclaz