0e45c055ab91cfbfee2ecaf65cbb79bea435b01f7772135db6a66e4d3ef4dd37

Analysis

max time kernel
179s
max time network
188s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
23-05-2024 12:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

root-checker-6-4-7.apk
Size

9.6MB
MD5

b4ba4aa0c827c72a7604946e5d367f74
SHA1

727ec33bcd706563ac744dea354955e892b2060d
SHA256

0e45c055ab91cfbfee2ecaf65cbb79bea435b01f7772135db6a66e4d3ef4dd37
SHA512

1e626a4780fd0462ec2d8b2144a997408f1ac62fea03d4c258f65f1ff59e790fefa99d262b32e9f7f82e49abcd4f41e4c343e60e415f8ea9b2122ae2e9db02bb
SSDEEP

196608:av5DyyQlaKccCTRibbNolS9T/0ZpeNHrKoVg87hN8D2:av5DyyKnKilolqcZpeNH+oVg87j

Score

8^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

ioc process

/system/app/Superuser.apk com.joeykrim.rootcheck
/system/xbin/su com.joeykrim.rootcheck
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

description ioc process

File opened for read /proc/cpuinfo com.joeykrim.rootcheck
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

description ioc process

File opened for read /proc/meminfo com.joeykrim.rootcheck
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.joeykrim.rootcheck
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.joeykrim.rootcheck
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.joeykrim.rootcheck
Acquires the wake lock 1 IoCs

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.joeykrim.rootcheck
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.joeykrim.rootcheck
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
evasion

User Evasion
T1628.002

Processes:

com.joeykrim.rootcheck

description ioc process

Framework API call android.hardware.SensorManager.registerListener com.joeykrim.rootcheck
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.joeykrim.rootcheck

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.joeykrim.rootcheck

ioc	process
/system/app/Superuser.apk	com.joeykrim.rootcheck
/system/xbin/su	com.joeykrim.rootcheck

description	ioc	process
File opened for read	/proc/cpuinfo	com.joeykrim.rootcheck

description	ioc	process
File opened for read	/proc/meminfo	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.joeykrim.rootcheck

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joeykrim.rootcheck

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	com.joeykrim.rootcheck

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.joeykrim.rootcheck

com.joeykrim.rootcheck
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4355

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
581B

MD5
2c4fbaab77d54c368ddc41ab154f07da

SHA1
896b2773df19ef209497b725bacb9bdc980c8fde

SHA256
35046a9100bc9b181445ca0c624299be9668e0f24dc03537565baaa4219ebda1

SHA512
6169a01d95f035e4e86fa5c3250a3a18a89cc139d1c6aa132e6fc6e6b881728fad10ee21421fb2a5cf32616223e60f47dc02edc4b16d3b11afd6d3908d3366ca

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
571B

MD5
f1af99966b392c096697aeb9027e0430

SHA1
b1c7e9a062c772f97eb3c2b01ccff8bcbae21e67

SHA256
680a8c471117d70acaf77ad423be8bff4c2f607bccdf2aa68cc090af083efac3

SHA512
0a5167b430c594d31338bd3b80c53a241fa4be0639da4660b49a84e1957b75a529ebf55d02cd644467f5d7625dda79aa7320cf8b1c97c7536ed27561c84e1c9b

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
537B

MD5
d41fa364f52f5d1c59e850584f2ab046

SHA1
966e4bb47b1a0733ef2e23ab67ebcdb76343d0ea

SHA256
69f6e8da4d317e7fda04f3b4027bde16707774f0aa1652daa3562f2dcd9f9cb8

SHA512
7d13fd8d42e544ce37e350c6fa95c5f9475430b2f6e27f7b802a76e5d2298b169b73b808955f55a633b4f0e59a528baf457e9337704cc05ec5d70b9c139a5280

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
567B

MD5
68d42a1d6baf75de7c821ad5bf3e6c56

SHA1
95c568c58201aa15e8ad17d759cfaea3015efb63

SHA256
3875b861d61c1bf5fa31150d05bb8d7fbbfae2418c21a137ab682491c85c4dd0

SHA512
cfacce8e9a8c52624192abf95b4f8b38e40bfdf63652606d5330d3fb4729fccaa0956ab3a04e6ee309b2f58b5da2c57a2e163a314e4bac99a4a134b3368ea355

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
596B

MD5
c1c83e55dce53318b0a384ff55660b79

SHA1
97388f6d950a07ead795bb93b21816edaff8073c

SHA256
c508e794cbc60fb003a64feb545cfc32d38e8042410c15b271f8b267a056b96b

SHA512
a008e182ef2727691340162505a04abc9bdde38276bbc9e478cbca3fa3429187c4b8fbf52be69895048e3988d0ae6a1bcb33eae5c0ae6173b26f258c78e27093

Download Submit
/data/data/com.joeykrim.rootcheck/cache/1582435991586.jar
Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
512B

MD5
5d0fd3b69b39cbf1be4381b694e9916b

SHA1
4c8a9563e29cab2c62b37e7b93e7a59a7ef38446

SHA256
ff952daf21b7a28edd8684a3a136d8098136cfff5580f1314c3a9c2a41c873c5

SHA512
3aec4853e464ee83039b2e8ab6c9290007f249e952d29a0c5439b952e0b557a60f3858e44e1f49c7aefbc9c78d90f16e5896f8baf50360901c7cdb2beb0e7858

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-wal
Filesize
229KB

MD5
3b8aeabf98d6569c55ce4746d8ed7676

SHA1
730b44f88a2a9e50dd8aaf5236d31988945a0931

SHA256
1ffd682af998245657eb3704b83aaad67e7cbfd5d1cd5a7ffe03c5b84d177240

SHA512
ad81b963960657d70dd855aa894f894420a80fe28db5cab05e76ead2c23f15b07b1730022e6b199e4883c541ca05f4a661a250e2ccc9c19a656e17239a247999

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
19281302ca284cbba7ff78d80e35f30d

SHA1
7d5bf49a0cab9238e96c90349a601f73f5d40e1c

SHA256
9419c46c2e3d198a6c1be9a907361eb0cad451785d48039d50f62a286a37a219

SHA512
a4d97aec007695942c42e9e7457bf400957b0d6fe1b8c31ce447b14e650a2bcd2c62c3a7472bda9f1052c4d4387bb9e88de151e7f49214e35fc8f87f098ef04b

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
cd0d0dcfc4bf910f2bb9de7acac4947c

SHA1
fd99c828971dd162bdf101b5f23594f36be0ef76

SHA256
369f83c5119bc13239392b2919429eee5668eabe01d5de49207460d03ae9d9c7

SHA512
cfdb93665c019d9130b5471b498173b9901dec31e241c2c48a290a73fcf02e5fa1cd9db1eb20af9c28f6ae547cccded1b8a45ac2474404fb3def5ab525e9b071

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
201ab4a824422b7558a890c84f6ed915

SHA1
4f099a8368d22db065e7e6d15c74eca3be7ed0c1

SHA256
b1e7dc4b25e6390490a7564602c4588c16c116e2b8a07f9d16407a25d160b927

SHA512
437111cf0efb65ccb644f4382b82a460c671cb12d4221ae0e3f1da2091fb46fa4a45a2df77eff98c375873a73df3c4a5b57786141ee9afa2b4c6db5470130202

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
5beb0f52d5bf917cc2f8571456e37a80

SHA1
6761f1ddfdefb8d8a752d7effe5bc2df663b4937

SHA256
c9d7718cfeec8d052e9d95299becb35fdbe0f36549c05af40166f37ac1fd8903

SHA512
534c7a94aadec7f4a239de1829439679c35aefaaeaf37edfe5c1beda71e09793e70ebe1794c1c7b9764186e6c8e33334c68490f5f578b96cfcb3e32cdbed6e99

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
759631d5f0e020257930bf86d5e2a08c

SHA1
bd80cb2eb6907ee54cca8774ad2ff354a369d0b4

SHA256
48b0350a5b3ed55339425a57703d227f1571b942aaa215b0fe35d63309c16ffc

SHA512
1143484ac9a936396e4c6e17467c6b14d2889ea8a22638043d0cebdf04c7ec6fd5f1fabab2bdce5ec903b23093b3e762db6c88d7b98bb03b6c6ca7a64b237936

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
17d67e9a79a3a7af1bd413ad5f5d13d9

SHA1
dffa91ee75c3ff4f92305386426f9a6d4db8a616

SHA256
225504779615e2038be8dc9ac5f98fd3230988a95a0b341abcf2a83341d74023

SHA512
a4c4c72bfc5f16daf28c7ed3725d9f80b2b0f982ba209fdd693853cc1d1778d5e38b30e9bd1e7c82836a004931d31780eda174e4b8ed8274b6049e3a668da18f

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
512B

MD5
fde2152ec56b0ef118f7c0994f033bb3

SHA1
476a117d1ef881fb169542085a4af62406b2794f

SHA256
a73a2759955cfbb39b819d23487ab150f74f4c6de5891e6cbd678fed978fbc90

SHA512
037ec777813a9ef466b9ded762ebc0020fe8065e01641cac745504e03eb358452259d506e9a49926dee5b9448bd4aa09bca826092acb5acfe8f2409188871e0e

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-wal
Filesize
36KB

MD5
3ea2f2ed1512c95ae4d5570b6f8b5fee

SHA1
6e07c4e2ac7409fb7db8d7e64f38e78683a08bc9

SHA256
2792ed65f3b5c7e9e1c52d3cb5f01f9abd415c219f8be1a37a36eefb120368c6

SHA512
9d50ffdf7f0c81edbf722efb950cad63ddd9b19c6773af1f1988237133e2a1eb62163436bdf8634a69f982f7ddf08cd582a9705664ebadc40382eba0b3500483

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
4c18492f4615c34f7784fc208fc4ff9d

SHA1
1655791dca74cf85656d293013b572ab6fd628a8

SHA256
b26a7820489d7ed756a5d26d4facf4cc2b19f0d8beafb47abef7bbb8504db2f6

SHA512
587d387023fd189c1d0de8f6055ae0db3dac31a86c18cec367b463df64385202c1a0de6c5cd3cccab698ec130625a08fb845a7998965aae492f36562c8bee885

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
550b990e3ff3c835d5a87b1d09b0b76c

SHA1
e17d1938ee68009b82b0c3f2a0ba005ddf3f7e0c

SHA256
d9b4d9f551ea1a615cb425363cb13e8f3ebae7652eb46c9be24ffbd00ce6cbde

SHA512
e317775f0177f96bfb37958152963e7b7a9c7756b998b4bae7dfd068bcf0e8210a8b74a677687bdbff4f0c216c55fe0a9ef200775711b15e74a4c6f6bf8c0236

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
05105e8e0e072b149db7603c3bf3a68a

SHA1
7ee262e9fabc3bd0a22fba86a7739f460cae25a4

SHA256
88557500e6af6ab84c2ad44670f3f95c5d5c58e617add56ab5903fe037899cb0

SHA512
6d1840dd57a277d4899a304f19a029b6b5c9e780e4914c419038d56b98f91f63f28c4f84b2b6f528a4ab00ec6650f8e2d6b44b48173cf6caa998b4bc829c8e08

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
b6b70e387610c4d7a0e0efbc6cdd9a6e

SHA1
0dfb0f9e78406d70d159ce693b7300fe37a3e51a

SHA256
f75ae2890c0ee9399a1bb4808e4868338eaf81ba8671026f2275299bb795ed5e

SHA512
80956e8fa86653c4ba1d3ccb216763ee53767bb24e0ef91665975ff6acb9c442ea5f021aa6efbcdda02428d2eda192048e2fda0e402035185052c258e34bcf4b

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-wal
Filesize
4KB

MD5
c7f39fbf5338cd5ce359839b61e35e45

SHA1
27ca0828690751b32fac6f17dfe433cf34a8723c

SHA256
a9a18870351e72aa08974db878b8863718374af3293e9e541804583aeb13da21

SHA512
822485290a024b19dedf49758ba503ff960f367ed2a9d1e5484ee763688cafbfc510e9250eae42a00de2ddc889306fffa18f1f715f181251182387af8fae7952

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39F8000C-0001-1103-6D7B96F0DAA1BeginSession.cls_temp
Filesize
77B

MD5
7d5eedee858479dd0c997a0180de4d2a

SHA1
82976694dff48e5d95f56ad850579e4eeb92b527

SHA256
a8cd590582eea3b1c5676059e6fd2a9b2a1098c7de13c350a9adc0fe44021487

SHA512
d35b3442fb45dd7c54df3f994026728cfdf345acd9f1b302e88babf125fded25d1b01ffbf41385ac5e4321b1a1422ac17941bca312974808e48e69d0e7199a58

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39F8000C-0001-1103-6D7B96F0DAA1BeginSession.json
Filesize
132B

MD5
4a1dff155dc33008c707f99ab85efde6

SHA1
2f52e7e57af3940697cda21afdc9502fe1112b3c

SHA256
229caed0ead2b8dbbea83307803b8f0b1208b260c35292ad823dc4670e2973fe

SHA512
741aeddf2e121737100f966be2f73aa23c14b74012872f9e17bb88a3d61028af9528f14dfa092d573b2d74f498036bec12c2342d70d5310b2bfcd25ad00f18c5

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39F8000C-0001-1103-6D7B96F0DAA1SessionApp.cls_temp
Filesize
118B

MD5
d35790f1fffe1b646e84d7e9f62f6d95

SHA1
801a910d30595993923b4e78f86223f02c55615f

SHA256
abc67fab1b8a38462ac259ab41974b73bedb2ace1d1748c22716ffe061953f79

SHA512
acc3a0c862e1d8c215e22a2a1b596df8aefd6e20ee6bae4f72b1c4c9007c73f8a975f8b37ffca1838983a9501578be1b362b6a8b89769929602120dbc9ae175d

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39F8000C-0001-1103-6D7B96F0DAA1SessionApp.json
Filesize
232B

MD5
bb6440b8d0887096c459fd2aedab9dce

SHA1
f1c3debcb8f1dc02280677a8a140064e52723dcb

SHA256
f124fd0e9fc3b2021dc8cf57892ad6ed74b37dd11f93feb7bb6279959bd95ee7

SHA512
691a5616e285ab8765c43799a3271b4c6449399bb51806fcceaff95f8d0f87286ab00d18ff6d09b6a523192987cde7c3213979d5e749c5851adf9088605e5d44

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39F8000C-0001-1103-6D7B96F0DAA1SessionDevice.cls_temp
Filesize
48B

MD5
cf9cb0612d588a1f71b63084cea67316

SHA1
3d035bb92fd3f8997160cf8025c40239af74d3ca

SHA256
0d37c5a64baf86735501f9044eeb926b3d46548cdcf67c2cd1f773df36624ac9

SHA512
70f000233e181e3b7c6fcf07aa04fdb570f970335837f8d1c4680a9f78af9f9e17c73a0a5646770f7a8787e338899edc4a5197b023865a4da894b1aca12bf600

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39F8000C-0001-1103-6D7B96F0DAA1SessionDevice.json
Filesize
202B

MD5
75db92d50c80a89e068550028c62acec

SHA1
d78ea55f5dc682e4da456d26383249f608fe894f

SHA256
1dfc488309883b61beb3462567a9befeaf36bb475a07a7ecef2be60bedb4b5a2

SHA512
dbb81daa5fab357f087dc295e7861444f945eb4c3883a09926b47312ce526bc069266a8a24b2a5b4921fb13e797696c5824195f0a79317e279ccf7855ca2ee13

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39F8000C-0001-1103-6D7B96F0DAA1SessionOS.cls_temp
Filesize
14B

MD5
9b3d4522944ce6396563812bfdb92fa9

SHA1
6d2a6133c8f01938a48ccc77ef86ad8ca335c020

SHA256
d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

SHA512
091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39F8000C-0001-1103-6D7B96F0DAA1SessionOS.json
Filesize
54B

MD5
93023624eb8dff5c20050da136aaae0a

SHA1
acfd1ffed752c28fb135ba83c0c6345ddf2f6995

SHA256
968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

SHA512
bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
435B

MD5
f025cd2fd7af072b7c7215e88fa230ca

SHA1
b95d5d0e05c15b2f17c66671cd903155964d9f0c

SHA256
7155c06fda03e9927d0dadcac599f4c3af40f83ee4e8f92e0f8b646c59567163

SHA512
3349f8955b58ea3490696d2197c391d6dc7db374c02fd59b648ede97436c1cba8b5c005aa4f66124dfd2f32c420a37a51769d910a9f4b665a263500d8277123c

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
1KB

MD5
89a88e71b11935c2d7c597e86088625a

SHA1
0ee741a75a797b7ab7d9718eb72d9772064e4ed4

SHA256
202826f491bf6a6d951e0628cd086ca69c50fb9ad5a39a6c5f79f6f84ab041a2

SHA512
8f35ef455112a979ec11c676496815b95a8e5db3a1fecbb7d295741970b101e4d530b38180263c718739592a1229c9b186d48d32207e3457fc828d7e5124b03d

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_e6ae5a17-3e5c-46e2-a8c4-4c7da4dbdc9b_1716468223027.tap
Filesize
353B

MD5
0645e16108350504114e0f8a0b2cee05

SHA1
8ee0475ba94414647d44b6c2d93af16d2a4b37a1

SHA256
bea397bfb60fcf6df8d5eee4bbddcf73e87a7ee6624e4fcf9c373762322bb155

SHA512
ea453f545b2d0dd97bc63eff0aa43f8837b03c79f0d854974ea433d5dcd1c39c39818958e143a6c627354a9fb9134111b6395edfad0e68e377d23bb3fe774156

Download Submit
/data/data/com.joeykrim.rootcheck/files/.YFlurrySenderIndex.info.AnalyticsData_RG6P5WWKVXRC8CPTJZJT_272
Filesize
88B

MD5
e64546b1cfc9642d3144be0458e98072

SHA1
3b9828d285cf698057452cb9b340af934df6b64c

SHA256
23ab4f3b7d2a45cee5e4ecf281aa4bc105ab9b2d2cd3e37ce3a1be5c178aa7a7

SHA512
f3fb625da8f7105879ef90a01be284a85650b64dc1b3f2e18b6fdb4c2faafc8be9d85fdde18f21c780d105679f65964db3d55478946c4d85e970c277242a45f0

Download Submit
/data/data/com.joeykrim.rootcheck/files/.YFlurrySenderIndex.info.AnalyticsMain
Filesize
72B

MD5
b624307e7209a4ae62c7bc8071209703

SHA1
adef517ddb0285576ec9fa42e107de8a9cf1af12

SHA256
cf558c8c8aec8c3f36dfe1cf9d20bda6b87922cd8348b514d54a0769b768fa4d

SHA512
0d31e749b568c117972d287f06da79cd0a72e53701e426b311f349cbc94e14512331b9ee756cae23676c8fbc936ed292dacf853c4f5fccef6f09806538d678a9

Download Submit
/data/data/com.joeykrim.rootcheck/files/.yflurrydatasenderblock.5b23c774-e98a-48fd-9ded-4564bc8e0add
Filesize
379B

MD5
f19a96b3491c069e8278ce771fa6450b

SHA1
1260f79dcee39b904b82500eaff8b546a62b4267

SHA256
eb472303b7b7e1693d8e0ecc7f455042c1df7617083a21f6e165742d4dc3eb49

SHA512
03a597ef0d50646a62bf6e3251d2a4fd3ee1b5ac760dcdab52576934df468454406684f74d3ec8371c487f82b59944c3e02b13b06812e0227c68486bfa336981

Download Submit
/data/data/com.joeykrim.rootcheck/files/gaClientId
Filesize
36B

MD5
3626fc4f5afd8cc23798919d95d518aa

SHA1
e4e3cc4a8a5b65b957f3f59690cbccacf3d421d4

SHA256
7ec2f29f8d02d3adef4e4bf078aaeade3c5f0daf788bd414f18d6470879683b4

SHA512
bf234194f20ee8db96bc8aed1c45bbe6c8199f909ef55f7de1202ac5010b7d2e7519e22fa56bc790500dce4006a147ba9aaa6f55f9e8b88b3534d936750ef8ea

Download Submit
/data/data/com.joeykrim.rootcheck/files/gaClientIdData
Filesize
32B

MD5
30a2d34dad966309dc05d5f8efbe87a6

SHA1
bd8544fa6377767fd9ded545ba1fa328c3b7a89f

SHA256
a8e6e3791dab59fb79ee6c8c04de9ca3cb86cf4824500b17d6cdb98cf5e742bc

SHA512
d45dc44ad018f9e3d97e1b3fec2efc6563f2db43f1a09c27fab49a42b12c7aa50a44576bb7416b1218eb2732825085dde2423e8eab3e14f005db63ff99115d27

Download Submit
/data/data/com.joeykrim.rootcheck/files/persisted_config
Filesize
74B

MD5
41aa0574a2d20ea926d0289b1e23f77d

SHA1
689dae2aa31b6bf22dd5721ce0f0f49f9460ba61

SHA256
cf9427baf8060433a0cfe20e82e499fb112cf40dd3d1e60494f82371dbfb77ef

SHA512
13bf1aa5a4a0ea934a2cb94edba71bd1971982be1436ff27a1887de6b3c5908eca18da02d2db5fa1e37c1509cf203a182fe9eea035cc901e85e1d6e4b542a7c3

Download Submit
/data/data/com.joeykrim.rootcheck/files/persisted_config
Filesize
420B

MD5
e7655af1487ec589a9b003ddc95eee59

SHA1
e4fa60a31a8f645b6f17f7b60faf45b8a88ec405

SHA256
f36681ba6f03d2b66d80a343021e521629c36f4b5dbf0e1196fdddb0c8d8e0b7

SHA512
a966398e1b97c9bf98197191db5d481f150b9c80f09f05ca5dd10b1bab329e4e1463c4c119c0123c27c99b7513c54550c65e281b7dd8fc9359791dad19fd48e9

Download Submit
/data/data/com.joeykrim.rootcheck/files/persisted_config
Filesize
431B

MD5
fe2c10139b81a92b893443d43f639bad

SHA1
f5c137576a49395e763f4509798d50cfc55e6e23

SHA256
ce7773039e8075afa604e7679c5fb04db22b12275c8ad317354d085cc89fe61c

SHA512
f43f4ec1226723990df1c4f961f36d1696278addd370b1a812984c93f049df875d36992db9bbababb80b5db59127bdd49d79b9aaf2f776fa3a3a9156201658e9

Download Submit
/data/data/com.joeykrim.rootcheck/no_backup/.flurryNoBackup/installationNum
Filesize
100B

MD5
d2289989cb9b536842b9bab4b0c72f33

SHA1
1370f4b7b31d1fb51ae7bf61cf46ca4432379994

SHA256
13166e9a620ea5a7321dcc05ea55517a1a5cffd21bce10c23daa7ee6ec5ce089

SHA512
6b6dfcbd979c31ae3e6f6bdf125c961b465c390f823cab7327617946a5c306cb052ca4eeec10df4e08e1d9fbbd3c9f4fdbe51409768b55a6a7c03985e606e311

Download Submit
/data/data/com.joeykrim.rootcheck/no_backup/com.google.InstanceId.properties
Filesize
2KB

MD5
3a35053a07f1cb83d1f0c99c53f6e7e0

SHA1
75658363734b461ab3099b30585e1c74e2fef1a2

SHA256
78eef615d41dbdc852d37f026a571822eeca0a29da1fbfaaeecb48985e6740f4

SHA512
a2cf63edd5759dc2c68885a742a877c08a5062651a146af53fe9091cdfc2dbe16206372d338f8640b88a03ca2f4b8c048e06f6f3c4e0ab553b30d3128b33959f

Download Submit