0e45c055ab91cfbfee2ecaf65cbb79bea435b01f7772135db6a66e4d3ef4dd37

Analysis

max time kernel
179s
max time network
192s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
23-05-2024 12:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

root-checker-6-4-7.apk
Size

9.6MB
MD5

b4ba4aa0c827c72a7604946e5d367f74
SHA1

727ec33bcd706563ac744dea354955e892b2060d
SHA256

0e45c055ab91cfbfee2ecaf65cbb79bea435b01f7772135db6a66e4d3ef4dd37
SHA512

1e626a4780fd0462ec2d8b2144a997408f1ac62fea03d4c258f65f1ff59e790fefa99d262b32e9f7f82e49abcd4f41e4c343e60e415f8ea9b2122ae2e9db02bb
SSDEEP

196608:av5DyyQlaKccCTRibbNolS9T/0ZpeNHrKoVg87hN8D2:av5DyyKnKilolqcZpeNH+oVg87j

Score

8^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

ioc process

/system/app/Superuser.apk com.joeykrim.rootcheck
/system/xbin/su com.joeykrim.rootcheck
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

description ioc process

File opened for read /proc/cpuinfo com.joeykrim.rootcheck
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

description ioc process

File opened for read /proc/meminfo com.joeykrim.rootcheck
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

Download New Code at Runtime
T1407

Processes:

com.joeykrim.rootcheck

ioc pid process

/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar 5190 com.joeykrim.rootcheck
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.joeykrim.rootcheck
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.joeykrim.rootcheck
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.joeykrim.rootcheck
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.joeykrim.rootcheck
Acquires the wake lock 1 IoCs

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.joeykrim.rootcheck
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.joeykrim.rootcheck
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
evasion

User Evasion
T1628.002

Processes:

com.joeykrim.rootcheck

description ioc process

Framework API call android.hardware.SensorManager.registerListener com.joeykrim.rootcheck
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.joeykrim.rootcheck

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.joeykrim.rootcheck

ioc	process
/system/app/Superuser.apk	com.joeykrim.rootcheck
/system/xbin/su	com.joeykrim.rootcheck

description	ioc	process
File opened for read	/proc/cpuinfo	com.joeykrim.rootcheck

description	ioc	process
File opened for read	/proc/meminfo	com.joeykrim.rootcheck

ioc	pid	process
/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar	5190	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.joeykrim.rootcheck

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joeykrim.rootcheck

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	com.joeykrim.rootcheck

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.joeykrim.rootcheck

com.joeykrim.rootcheck
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5190

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
582B

MD5
9759f8079b2215d011e496aa2b11400a

SHA1
85673d44ea83576c477051322433fadfdf496e64

SHA256
d0ac3e3399736eb3325c3005aa2afc11fbeee96d7a1a45c5c8d1aff492636e82

SHA512
2d5bf683fa2b652663af00107d54c5d1b084081909361c3da21fa78aec05a34642dc974a2dba5945dacf2b172ed107c53fca7f8cd53a04704ad9caf93a7b0235

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
572B

MD5
2bdc0a2153a20dc9a6ed23b58c2a5884

SHA1
2ffd76d737c47c30a2ebf4d8c6bf52c6647965a9

SHA256
76bc5001b91a006f3eab8d4dab1cbb06672a40ae50846319700b5a635cc553eb

SHA512
24615b1a3f3121ff333c18f76f28dd860d70d8655660b968e67aadecf290f5163dffa5740db5014486bc241502078e0e32008321beda4752f5381d38791de1cf

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
538B

MD5
6b20be595238c118b938e2ad4a654bf1

SHA1
09ceb0370a9f45a92c091e612f4b3b5d51f4bf0e

SHA256
9f1126bf84099638659cb380ba0e9823e6e49d6659307926409a62f69b02045f

SHA512
503ec8d242c1514fdc3909594845bed018ce93e32229f09f5f40af17fdc5d35633483b0719c525abf0b2136298544559f1f7254f981289143cff75064d9fda4d

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
568B

MD5
f70c8c20ec5d2b73593a4702436aecf2

SHA1
f1a10c1d9d4b8f8ea09ca2ea74318d6a409aa290

SHA256
19d6a5f70de4ce82a03c6a13e4bed3ad9b03e570d1f72381c4c222d57c9718f5

SHA512
b3b232408f52dd3fce6836f1b9f036ee7b34145563de348bcf36698d321ee2917f94a33c3a2e869d5d085069d9201104ab3ea29673d99dcefe727f5ffdb6658d

Download Submit
/data/data/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
597B

MD5
a169a6d55af5ba76c007582f7311cb25

SHA1
49ac4d2ef05c5ba66f2699876cb1b4db74f6644b

SHA256
3d20b6f9acd771720ff8116ecec98ecffbf72a7ecc268a9a491e52de87d4c86c

SHA512
1051018fd3b0fc8bbcbd17eea633d35feba5c59d6e5c7c3b71f24bb2f946e9dac7bd8ac149a4ab74256d944e6082c8476e89d2d1d11558c9898321a00e5ed31c

Download Submit
/data/data/com.joeykrim.rootcheck/cache/1582435991586.jar
Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db
Filesize
28KB

MD5
e4b8255ee589583acd122c6029335ee2

SHA1
4ed457d574e726d42e883239d4af6671c9186536

SHA256
220c7bf31af75359fef5fe8f123ae60bd11a674e28d2d0f8cee8f4f599f79fb4

SHA512
8607f742de0878a34970186f1d25637975c86959b7ff7a2f6a1582ca80330af45150f1fd04d30bf46187eb8032f5773d19a6451abcd63179f0a6e4cd798ace60

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
512B

MD5
a98170228fabd6954f09ed1cdc185d7a

SHA1
83e1c3787a185ef6bcf97af456d2e5e198dd077c

SHA256
a0470508b1425f3217b4a0a22d071c4f0edcb5c24ab853f3a2d45457c888e705

SHA512
756de2cd8317bb4411cd87bb30f068da752c42a256004d6296dc7c1a5a88a632d50c8bfceabce169bfeaf2c4d52b1810c409f5f467f0dac62af385d59eeb13cc

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
a72d59e745f64e83e4abc0894d5d745f

SHA1
6560b936dfd0687dff3b03ecdddc6b6025c3a8b2

SHA256
bbc2b1880364c4926d9483019d3e06411c42d766390d4ca7f70dabb6167916de

SHA512
2881dafa0466ec525e314b7a6f3f4e1e7bb7f78d0b765287d47def96d2d729dcdb060e089f825c8d082424caa9ba703b3dc9a7ba0593fd85fc7e0f738a38c90d

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
4KB

MD5
67247d8c19229a5adf44f1bb5ae69d1d

SHA1
33ad3f8cc79181f8179506e7efb3584311eebbb3

SHA256
a0bb81133a82af0e3f5c25fc0dd1f23696faa1a509aec99c8de3639fcb1cc24d

SHA512
8177fc89210707c4dfac4eec2949f4a3dcd5ccd3f9ac4a728cc8aa906e7338f3762bce96fa289f0cb00147c6b6cea3b908811e2b5c4b9cb23506353a028319d0

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
890217d4bbe78362b2b173afb63137c1

SHA1
77f11ea728860fae891d0e275fb0ee1d76f8b455

SHA256
5a2669431b33835904dbae03e4ff5306f7bbcc60352706137e7c9015507ba428

SHA512
fd5ab0e6873d194ce56d8d69e7c91d762d78c89bcb5a26a451b4eb3724ffa524b14f8b87d2b035ff160ed37ce4792651dfe4b9803e05c3dae58a45f1f2e00432

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
8dc0fd8245c5a48194ffb46910649e88

SHA1
9e4afde58e41210dc78e8d9266a6f6335139316d

SHA256
7fcd707bc6e42a5f9bb16d222d59c45e421ef8f41a824b6333850f1d14972818

SHA512
e450a812f4c40e148b4c15a2a0710eb0157aef37baaad7898248e0145d1bdda633e421fa07ec259a19a0ef14295ab4f25aec2b10287fadf1e0f067d5de0a24cb

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
12KB

MD5
a67a40885a70ea6092a627882350dd30

SHA1
952a6f422a7527e97249de27895af92a321d0ccb

SHA256
63258c0f8ff6b3bb422c40fb465b33b196205591daaf25775b43a7cbf57feca5

SHA512
ede6ba09540f382f1bde5a9a11d5ff1bccdec929149a81baadbf9f3ed58e6f3b7588096d0a447da90fe0b575256d476a70ec3c8edee1f40251aaebbe13130edf

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
23bb055d7f462e41ebf70324288a8401

SHA1
40eb3170318c6962bbaf54f9a365e96976777655

SHA256
c366fcf3f41a40214587afa74633fa1cd59ecd1aeafbfb9b04783d678911099c

SHA512
94b953f8a0a210df178063aa612e3f342915faefaf99dd9413ac174ac2b15b698fbda9e573245cc5500437940d1b9a721bd7e0e25402dd5975407aee76cdaa5a

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
1c55438975e8af3ea940988369104cdd

SHA1
71f5e629e70a0b51ce2f721f666811d8c2c368cd

SHA256
8cf4dd418a868908f5748e64912f77b4085040853f135e0435fe8361901216f2

SHA512
5c0e8116ca8284bf0febe06a6bd1c7e5d39460d1b94f46c3857a318b899b5a042a02a991fba43e1112ecbbe8ed4b94fd17c2eaeae0f421c1715cfdb527851643

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
563a709fb83a69ab2ffaf4d76291b327

SHA1
7aec9dcebf4f451d38718c51a629d96ecf6ad0c0

SHA256
9d35da8f4e6660809c11e9b97ed6016ae0f76e63dd2dce8ad49d170bb7202853

SHA512
928f31f79e2f1b19510a4f84692014fbd468335890becbed6f77b124edb2434eb9bc4a7b2837bb288a8e4612b939ad00b1a45363fd62deabfc7344393fa8c0c3

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
a5697316a211724d348792cf8291c504

SHA1
05a2a5680d7091d4eca929d39a8773771ff86e44

SHA256
4933843c0a3332d6e5ee52c5db38318d6287619729453022f087331e53d521f8

SHA512
f35e77aea9a89ee19f982225b9534edd4b0d1cfb68d77f9e6aa05cd43a748fd7e94f5f6e6ca5e0ed156b53fc2cf1112263dbfe50acdc19a7e6ab54df89307c8f

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
61429a85a500e7f25db65d606a4622ec

SHA1
aa4366aabada0fd12b65612ccfac5bc082bfeda3

SHA256
903b496afbcf7d94c063d688cb168f1240887e2c9422f32a53b3ab89c2bf0f91

SHA512
0ec4c09f352b93d9543bf0bb2a82c67add3bfb86dd8fcdd88353b7ddfe91f6d73e07bca53c2563df9142fc7cd2a3d8af76a6079c9e9729112a9a719adf78f144

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
1e23a1a7004ad546a4796bba49d726a3

SHA1
b4bc906e4c49a99c0d4dd018f58e356476b64b2e

SHA256
a260bc4f91dce85e102fd9ccc122b0392e81692da5b5890f2a918705e3944281

SHA512
3eb53e9818caeacd7447ef0dd45b5f27086b5f53ad8528eee287fe1990ffd50c3287bca4d0c96bd78f1fc4f5dd9b2ba4909903657498347daaf0d5e0e1a3f474

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
512B

MD5
7d38e784edab4993f58ec6a773145aa5

SHA1
f515f11874be05bb2448f0d759ff754abfdedf62

SHA256
439cd3f2b2b233af31a949b8fc2ae915fa4e4a5e9ecf1903fa115bb10f2a1387

SHA512
7a2f0f6fd89fc1ee3919cf26f9155f7d1ab0d6bc506c4cdbe206e248b04b92813690775c610f9562809d021e0b0d7c84a7da220077bfc5693ff806ac7a5f0a18

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
66e7ef63a82b4aa69a3fcbc97f98373e

SHA1
f247547db879af0cf216683510fe06f15be2b3df

SHA256
7726aac64dd7f7b0224fbcd9a5c302cd70ab2bd1ed6541fff8dab0d6e81df54d

SHA512
a260787a04dd2fff2e7494698b0040a7338cb52a36da5ccd87a21dc7ab6103fd89f713ff9ab50b00efabd3f23f8219490742c17ff3daea62c5e4f53fdfe4755e

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
4KB

MD5
227929b4f0233f4b29750aaf4699bf2d

SHA1
a0f61960c15d63d83d11c34e37046d125f7ecc47

SHA256
560004ccc08d54a61bbba3dd02cb480c6afa758647dcd4af15cfcc31ab119788

SHA512
e8e5ae6914a444455c060828a25de4f8568e2e1ed71b7f503451ef096fda4883849246ffea03d7789f6cdf7b9529072a471fb2ca71604077dbde7d15874e4daf

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
f714d45d203f56003f0ff3be546d22ea

SHA1
fc74e4098f40d7342968fef3786423d22f3175da

SHA256
3f134f229e9cc59c39de2320b12e44c4c40c7d5aeede0d4ecc7e118dca9e005b

SHA512
9156ec544681456cb927c505d087dada72d081ca69a69f472a6511b79db4bb15b6a175194b8747dcdc992adc1d79cdb687e663d23d1f9c66ce7f8a5bc3276de4

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
e6ca48451ce8d08ddf01e88e469c7ede

SHA1
d16cec95c69a950a3918808b7954562c9adc2823

SHA256
c73cb48b5a1133a7eee62da19bd131adaf38c52ef770dcc86b1a323f267dbc1d

SHA512
a5168f893712c6a32888ee19e241bc010366cc3e548c2353a41f4bbae1ae77f49f816ebcc1dd1653357d76fbbf0c1f20569763d8b70e5455e0347b0c892905ae

Download Submit
/data/data/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
6f1cdb5383673d91a2f8a38b45458f5c

SHA1
2ac6245ae1b99f276756baea5eac662c70422688

SHA256
bb5ce23c09d350973e7d6ffe392ed0c3111bf91722d7f2279fe99f42bc84eef7

SHA512
66ac8a26fa8a0d726c32f36ec05026cf42f575abcafbe7742504aaed3975ef3b6027af1cf4761518b6de7a4293be92f9a10232e40344d7e302f7f73f08e8d5b9

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39700073-0001-1446-2B0925454B4FBeginSession.cls_temp
Filesize
77B

MD5
d83664eb23747a849d3297767a1bb522

SHA1
5ed1c41c9cd07f788b989614aa9bdc19fb109b03

SHA256
28db77e50e78dd56bc9196c151aab30516e6fb047d84d8c81846d438e21e699c

SHA512
5cce26fa227356ec10005ae40bb598438750204ab8a30342c0804562463cd684b9b2f4f85f1c3cb85478272ee18c5f83e65b6b2855fee96b72c54c42a4c73b22

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39700073-0001-1446-2B0925454B4FBeginSession.json
Filesize
132B

MD5
56833cfaf3b75d3179833302ee0936d7

SHA1
5d1cb10f57ea27f06222267880adfea916e074a4

SHA256
e34a6b3b0efd32ec6ad2801ba6104a587bf1927e5c5ad5ac8f6036671bc918e3

SHA512
e35c6cb82ebee2bbfaaec426a66b42c417659e9a5b8c7bae2bb640542a84af7d3c0e9b40d8a5a8e2f992f4a96488c527aabcd81101cb0ce3bb1f61c508848be4

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39700073-0001-1446-2B0925454B4FSessionApp.cls_temp
Filesize
118B

MD5
fb84d9630632d7a4a6973cad9f68b82a

SHA1
79a5e0d9dca3343622c92f37e259c12bd76a0ff8

SHA256
8c5c968d8da69857ed277dde8f8a084d32e6b248a8f590297e26b0f84f0341e0

SHA512
66b284516e93bf045f7daf4f501c04880c8e10616f2addbf0eb802cee44b27f88b7e5c9cd5d06ca390d8c2b1adf1d663e6ce9b24b72c7b3eda6fff238507bc2e

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39700073-0001-1446-2B0925454B4FSessionApp.json
Filesize
232B

MD5
7c5f0fad9f62317af31b89475631ce5e

SHA1
26965ab7336e612e05bd2e302cdf54c67379eeaf

SHA256
c3164f1257552214b6c6234a50fa1b990efc24c4f8b8772072d2214609ed8d3a

SHA512
a1a0e8854015bd8afa93e85ab5732add97fa25bbda0eb4a5824390ac680131f80625d523536dc3aab35297da0357c2c169a64000ed721f52f0afe182243f8099

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39700073-0001-1446-2B0925454B4FSessionDevice.cls_temp
Filesize
48B

MD5
2390c1f21db00b20c07107e3ec7275fe

SHA1
e663a646460acc071aebee942cc1776c23d77655

SHA256
d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699

SHA512
43ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39700073-0001-1446-2B0925454B4FSessionDevice.json
Filesize
202B

MD5
afa07370d07ed0a8ac9554ee7001bb72

SHA1
d1e9de22fda1295087525ff3a377f7d7dd410ac7

SHA256
8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d

SHA512
a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39700073-0001-1446-2B0925454B4FSessionOS.cls_temp
Filesize
15B

MD5
2566d27ce8c28d8961f082c375d7535e

SHA1
92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf

SHA256
5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a

SHA512
1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F39700073-0001-1446-2B0925454B4FSessionOS.json
Filesize
55B

MD5
5caea4b68c57072f7f52a5a41720566c

SHA1
4d9712f1702c7238949da43f7d8ae6efb233a666

SHA256
3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363

SHA512
fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
436B

MD5
a11dd1a172a47079f8ffa1856c1f968b

SHA1
21626cf3dee3983f369491b0013da73921d8ad2d

SHA256
b695dea2d82b2ed480710a7c01b3175c9f5e8b9858ed8468d148b88a69b4ffd0

SHA512
7b45f349b94e489a9ce4c484cd8d4d081a22eac6ba9e373dacfa69e5132d56c9e9720d1371ac5c1450196ed2ed8fa76618390747ae61b6b8b5f2347cdafa3eca

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
1KB

MD5
b64b1dec5d7247c411b144b54f230709

SHA1
92573d1ee03d6019f0216cdbb0a105e3b87f78cd

SHA256
6447d5573ab538747b570fd971db888c2e1fcd9cc14502641de64f3115481060

SHA512
24955a52ca987dbeb415b6ca5ee65617e4ea60797a7102daa52e862da4c782f5e9e384b3e79f2834a36be412a359cd0392a1ae41cfcb83c749bac0e8b0b08a31

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_156a7787-971c-4f00-900d-01fb11b22cb1_1716468087863.tap
Filesize
352B

MD5
becb4862ff85fae38f12e0c4a6050475

SHA1
0499fe6e8760dd7511178731aee8fd9fda9ca2b3

SHA256
f8222399fa83a720a9e85c507a31777815c7802732ce711960cf5d724562f812

SHA512
4b712573283199895e34821d3c29f6c35534f1597398a39fe650af5856b4a649b5f9cdddb56bae910bf60398cb757518e8ff368f069cc028a92f7022d0ee9e8a

Download Submit
/data/data/com.joeykrim.rootcheck/files/.YFlurrySenderIndex.info.AnalyticsData_RG6P5WWKVXRC8CPTJZJT_272
Filesize
88B

MD5
2f75fe2e47205e36dc9c0e8bea9ef11d

SHA1
4103f53e6f3e7e95cf5d79b68c0856b3c88d3049

SHA256
2db0d6a3e90921c425914027827d04596f72bdbc1f7353e9c05181a4e0ae65dc

SHA512
f96830fe38253dc9b32a7394bad667886b355cb54d956046892e6251c2235a8ff41000141d58200dbf6ef09486c9d6301cd1fcc38f55b98ba3f4c1e2a5d21e6d

Download Submit
/data/data/com.joeykrim.rootcheck/files/.YFlurrySenderIndex.info.AnalyticsMain
Filesize
72B

MD5
b624307e7209a4ae62c7bc8071209703

SHA1
adef517ddb0285576ec9fa42e107de8a9cf1af12

SHA256
cf558c8c8aec8c3f36dfe1cf9d20bda6b87922cd8348b514d54a0769b768fa4d

SHA512
0d31e749b568c117972d287f06da79cd0a72e53701e426b311f349cbc94e14512331b9ee756cae23676c8fbc936ed292dacf853c4f5fccef6f09806538d678a9

Download Submit
/data/data/com.joeykrim.rootcheck/files/.yflurrydatasenderblock.84a40df9-a18f-43a0-83ec-ab2ea0032596
Filesize
390B

MD5
981e960a2aca93572dec5fbd2e2f893f

SHA1
74e27e79dc2368c9d35c1c5a6b7c9220b9d81245

SHA256
d4c0994eb19d5715a229f34eb7eac730a9287e958cce57d8168fa66304016b49

SHA512
cee7780c84d9ccef025db7044a82ad7d363a2266a80899e8209d074af7a9591ff380a0f0a2e3c0322c5625dd0844471415fbe047a4afe015c91aeda11b998e5c

Download Submit
/data/data/com.joeykrim.rootcheck/files/gaClientId
Filesize
36B

MD5
9b1e697cd34106e594229a1af66d2e3e

SHA1
101b53ff35c52c2ef855d24d78fe0eca6934fb0c

SHA256
62383185c93e91fdb60a0e2b92e98b0e393628c01668a653abf3361d5632e084

SHA512
3712d439e5f94c3c3509f5a7bb8d8b063623c920e30bff585249897d896eb51c57b0a37331a409e266c8347feb2f7d26ccb3b51fbc6c6f06874ef8c31c405c49

Download Submit
/data/data/com.joeykrim.rootcheck/files/gaClientIdData
Filesize
32B

MD5
b6541776510c77fa69c5877cc231df32

SHA1
9cddb6bd5adaec3d06f7d0950893a0a6eae92f11

SHA256
e7d0e2312b6468635a3e8abdf243f5dfe645196e8359a5880818f606924669dc

SHA512
329f3f26862fe948598c408961e1d349cc1186ca1bcd412479e421bcc62364b7c17a71e1e6a67b9f518626380e6b5acfaf3e6f01809bc65bbe5cf431729eb7c8

Download Submit
/data/data/com.joeykrim.rootcheck/files/persisted_config
Filesize
74B

MD5
a479e86e4839755aaebbaef480669653

SHA1
12ddc22822c9e3afe66733fe1473604261d8a953

SHA256
90e4aaf5919887d0dce27ed593a2518a04ad409a7fa027dbf39726cc55f604df

SHA512
4d140097300c62387563264b80be510999cd01052277c5f430a6b89f73ef2b520f05b959974cbf2239c681cee52264362cfdd2647c459e0a5b6de6454286cd97

Download Submit
/data/data/com.joeykrim.rootcheck/files/persisted_config
Filesize
420B

MD5
5f51f9c50e43253f12c4412b561caccb

SHA1
bea828d577836a4c635adcde4e0c0d0859a30199

SHA256
c6b7385858e95e88085e09560de33ed90ac192d505e99af77caa9389b7bb0185

SHA512
69a9f7455e14f6ffb84f51d6160f51388568f31b33c840a09ed3b8b7e1c9c6a1773503807bed75febd465a7b6a5bca9cf799284e75446acbcdaf599d944e06f7

Download Submit
/data/data/com.joeykrim.rootcheck/files/persisted_config
Filesize
431B

MD5
a06fd3d235bd17994bcadf072784b338

SHA1
8864dd1c551afea2977aa9855cab2d00fcd2d07c

SHA256
efcaa930ae2e5056ed26bdbae956f4516c4a5a04cff5ee9f119778cbc1de7203

SHA512
1385fabcb0af686ebfdcbbdf8a333591e4a430e741983a0e0dc82cc834026ce56f24ccb662ef4a3af2b78bfa653a782fa37cc01355a98748c8733c1a42bfdddf

Download Submit
/data/data/com.joeykrim.rootcheck/no_backup/.flurryNoBackup/installationNum
Filesize
100B

MD5
a4de30d64ae0751aac1f9210076e936e

SHA1
178bf0b11ac915c9539e064224ecf741d2976c25

SHA256
76b03f0f674be6500a1b25bccc9172db80fe038819975acec3aec512546124d6

SHA512
dfc1361aa634b43c7c9e75e79a7cf1ebf13fcab0a823f70ea5bda234e7e898d0e0dbc7af0ac48d2fa29f11628cadebdfc2c2e5e63a268f5a81eb68e2cd9f84cf

Download Submit
/data/data/com.joeykrim.rootcheck/no_backup/com.google.InstanceId.properties
Filesize
2KB

MD5
3c35da4ccaa7b81a589bae26f72ad46a

SHA1
9fa64011727ff301c87f8745f9ead41a6657a83b

SHA256
50b8bbf2382a4527650f2cd3e12920257ad1b36f41de103eca989235cf1ceab2

SHA512
da4be85a71d2b7d994fe5f521ceae7fb84b6e971c6a547ff1ade4b69e23a1e2c67df88cf86a9180d5b74cd7394b6c5233b522e24ca57022c36e463ac9c9553b9

Download Submit
/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar
Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit