0e45c055ab91cfbfee2ecaf65cbb79bea435b01f7772135db6a66e4d3ef4dd37

Analysis

max time kernel
179s
max time network
186s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
23-05-2024 12:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

root-checker-6-4-7.apk
Size

9.6MB
MD5

b4ba4aa0c827c72a7604946e5d367f74
SHA1

727ec33bcd706563ac744dea354955e892b2060d
SHA256

0e45c055ab91cfbfee2ecaf65cbb79bea435b01f7772135db6a66e4d3ef4dd37
SHA512

1e626a4780fd0462ec2d8b2144a997408f1ac62fea03d4c258f65f1ff59e790fefa99d262b32e9f7f82e49abcd4f41e4c343e60e415f8ea9b2122ae2e9db02bb
SSDEEP

196608:av5DyyQlaKccCTRibbNolS9T/0ZpeNHrKoVg87hN8D2:av5DyyKnKilolqcZpeNH+oVg87j

Score

8^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs
evasion

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

ioc process

/system/app/Superuser.apk com.joeykrim.rootcheck
/system/xbin/su com.joeykrim.rootcheck
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

description ioc process

File opened for read /proc/cpuinfo com.joeykrim.rootcheck
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.joeykrim.rootcheck

description ioc process

File opened for read /proc/meminfo com.joeykrim.rootcheck
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

Download New Code at Runtime
T1407

Processes:

com.joeykrim.rootcheck

ioc pid process

/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar 4608 com.joeykrim.rootcheck
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.joeykrim.rootcheck
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

Process Discovery
T1424

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.joeykrim.rootcheck
Acquires the wake lock 1 IoCs

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.joeykrim.rootcheck
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.joeykrim.rootcheck

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.joeykrim.rootcheck
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
evasion

User Evasion
T1628.002

Processes:

com.joeykrim.rootcheck

description ioc process

Framework API call android.hardware.SensorManager.registerListener com.joeykrim.rootcheck
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

com.joeykrim.rootcheck

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.joeykrim.rootcheck

ioc	process
/system/app/Superuser.apk	com.joeykrim.rootcheck
/system/xbin/su	com.joeykrim.rootcheck

description	ioc	process
File opened for read	/proc/cpuinfo	com.joeykrim.rootcheck

description	ioc	process
File opened for read	/proc/meminfo	com.joeykrim.rootcheck

ioc	pid	process
/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar	4608	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.joeykrim.rootcheck

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.joeykrim.rootcheck

description	ioc	process
Framework API call	android.hardware.SensorManager.registerListener	com.joeykrim.rootcheck

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.joeykrim.rootcheck

com.joeykrim.rootcheck
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Acquires the wake lock
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4608

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
582B

MD5
b35f12ec790380c1d36a8bdb82e938f2

SHA1
7f33f54726bac7f7f0b013d6589c33fbb18668de

SHA256
f99ecade8f0d6ea8f80ce0f2cb9e4b0bbe460f41045e5f61e03ced16521e97a6

SHA512
ca1144205422d7007734cbb5b065e453eaa30ca2433aa9879f0171bb8ad981253a0fa463d47cee0105930b13e34f3db2948690b887d7c066fc4f843aef752fdd

Download Submit
/data/user/0/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
572B

MD5
fc99e8704d694d835025ffbfb6cd4914

SHA1
333d997834e87bf3d4a43965aac47b3bcceedaa1

SHA256
355a9d259e04aa4146972d17bb700d331debb66d7a0da415d5e955fc0d7366c5

SHA512
400ef0d8439590605d038a74a4643296c2885b91e74e28c269900dd4b387e933b7b2acca0a218ce2ff23dbbdd24ead899d1a28a04bc02fd0dae6db2f07c42036

Download Submit
/data/user/0/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
538B

MD5
f5cc1084def61fecd6218d6dd89466b0

SHA1
7057389bccf7198d7bb30263fa0b5147249c9d6b

SHA256
58a3b3bbb2d4fb6623bdfd7baeed3094797bddec353fe5cc57c98e2d7c3a89aa

SHA512
acfd61233a61ebc084d7eb4299089f00ef40e660822312166434b5f45b4d097f7b342897e94bc42a8df746eac03845004d8e2013d7b3f2c11c2a8083946c774d

Download Submit
/data/user/0/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
568B

MD5
b82be4203150398dca8571c8e1066123

SHA1
f0064bbae09b5461336283a599933fef6e8bbb6d

SHA256
2bb29612aca0455d712764de33f2daacf4353e4c5f2faea4c35387c85bbccd8b

SHA512
7bdf0129823f128a81be88b248a5f6f54e98234ffebd02aa547d8486ef493560bb63853d97eae681690c46d09106c71b9431ee74ab08c50405e1d2b6b5005e79

Download Submit
/data/user/0/com.joeykrim.rootcheck/app_0de7788050864972a25d2d9c40c503e0515d6767-01b7-49e5-8273-c8d11b0f331d/events/eventsFile
Filesize
597B

MD5
a353f0aae1406b3a713c54af19086f15

SHA1
6a923136e11d7d12549d079c0b28fb32dc431162

SHA256
9b7f0c08f5d39522af22b6865d83dc8ef9b904406344d30811dc5d7d8884a3cb

SHA512
f39bb523749e5e1b9b582c9925e707d0ba39a31ff85b20d08f597c39f1c528ff6775e15e2a301a7a8e777265b938758bc754c2d8ef6e756f02a2dc1067c266e5

Download Submit
/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar
Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit
/data/user/0/com.joeykrim.rootcheck/cache/1582435991586.jar
Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_analytics_v4.db
Filesize
28KB

MD5
8686ab7c59865a4c0b80cf2d80eb08d5

SHA1
df647546d184b4218399f7c34198d038b06d4bd5

SHA256
014f88f915ec6bd3a6d48d5aad03f3200a710f16ce244b5dee94d1b24bcfc8bf

SHA512
1002c26ae0904d85565352e0848af7742f8a23ef110f9e5e1d378110db02ad1de4dd34a79e5e85a7b369a5e672cfbb56968ef43221dcf46e7a9a49be16ba310b

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
512B

MD5
55770dbefdef1f78d86fefdd10493fee

SHA1
31a6a802e022fbf509215a8a7c000a90c9a68f45

SHA256
b4974cd89826b76c149da7374370531efb6754b3f525e0d845bec6b73c3726fb

SHA512
3a4e6235a5a4349a2195fef2a25b5b7be6b71efa9f808ddf014f5ba32bafa464956feb8ed52dfc29d87a3bcbfa3068938fcdc218578d9854b2c15fe20279a801

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
9c74831a6ff1d53d90ea54bf42a999ee

SHA1
81cae5d9c7b8ed17b06b9b3b00fa9b8e9699ea70

SHA256
437fca13336b60c1aa84ac6f6a4479e5930f699c63a40fa8a0c9e4091b21ce5a

SHA512
7785b6111947175bfe94bf0c952a51486d2ee92d337350c89c1b48d56ffef5c0183defcfc32ad34dd04a8642ce328135f2bc0493df9662558f681848963dbfda

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
4KB

MD5
590a903f64c245c12298903e12092e2d

SHA1
fd5c25cb0900e9e0d47452ed321473fc2d353812

SHA256
08e17583b4e06f3ab59275845d43f4a35f5a6ecb9d8c9b8dc35099ebdeecaa45

SHA512
cb328f29c6e6fc9d0ae173ba7f3e3c9921009b22aa998ad014852e71b38ff652ac1c8b51561632d1368421a1acb224cd3dc20eaf151cb5423a9b8dcc281377ef

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
5557bee349719b23a89229b7bab8b0bd

SHA1
54aaba215ea37e921f218366de568bc2bbae8550

SHA256
7d6d8dfdb53aba327702d31dcda9131917c7130070f67809eab86317d3ea9666

SHA512
adc284af5b55ae42f20ce5b8cf97bcc93a0f3263a60f2e623099267962d15107612e37a153d3424e0dd686dee02f24d1ed0cbfe79c99de488fb812af4043984d

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
8KB

MD5
5161bcda36e88e1c12026edc04113507

SHA1
b9749309cd12bf2e2e7b98b1966b893b14f3a4df

SHA256
6c43b702ea43eaec75636bc6716078522255466d6c84a4784bc464bfbd273181

SHA512
2bf27c79c5fcc10c44f1eee14f8b1c51fe2af2070f95d202160336b9401ddf317fc036a1d9a5ea2bc24c75f7d217f24ee373286ce6a11c61578045b186ad0111

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_analytics_v4.db-journal
Filesize
12KB

MD5
328bf6420851a5fc3687ec96fa7d7faa

SHA1
81e4ce154ab8fdb916038b7cd80e2f83db1a09c9

SHA256
a3d85f4c3d8aa0626d7393a893da55367c2c1c88ae17b977efb7bb795a1fff3d

SHA512
1f7010dae87c47fc0ecfbe311f5427e3a3c0d687941df89f084aa801c2c470fac584adc24f468421afcd3c043d9c7cff935f1dcf4beb39540024a583c5ca80d6

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
a2d05df597ed8d34e76e395b81da80b8

SHA1
52e6890fba0a91d3924e24a3bbf533f3bca6d537

SHA256
eaac155f20c995942fd8cbff94561032ff740506b9fe17cee4e27ea61c51d7b4

SHA512
6e3b77f6ca324e8662b8fc1b07b66dac1970aa04e946e4b964f1024af4d2fcd644927775f07660fc5722d67c7cc04da905f0a0673558d21243afe9da3e4881d7

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
9f0696d5fece7b6d49b90b7963838482

SHA1
d861e5ed1c32d7e3a1ca056e88c38d9ffcefc04d

SHA256
1f95ba42dc0ee235044aea07d1dbe11fbf2c131bc043c0cd63a7aea76cd2b918

SHA512
bdf7f9dc8cf4c0732c3dba1d63cf107b1580ecb2b131c71890cc38388241ebd30035e30d145de35c71d45903cb2ad9b873d0e1a680fd8dd52444abe34bb979d4

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
cc5f524faba09e766c09013f0beee08e

SHA1
bda05ee4d67e7b950da71f9e23c9a1a5bc097802

SHA256
3cbd451d58f71058b40ea1d4fe1d084c21fc68e11008cdb54668d841709d8eea

SHA512
1736956f40f5c10d53ade21c14a9e43e0d71a3d8433f9bf4f95f3c2f5e8c49241710c5c56e52bdbf95da227bf87c50e61bbaeb22b94b00373dd4770648d92db7

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
64bf904edbcdb6918ef1eb412b35442b

SHA1
6d39fed1fb4f500d4c0da27b1379f6f254a4ae7a

SHA256
939ab504030dbb89d17a1719054baf95af4df21dbadcf17ed0c5b7a433a0beff

SHA512
137f5db5bd882dcb0c2ae897527b176c83eeaee18bb3c764a5e7e312aefe6081f439efaf693ec3e6c2514aca2d59705bcd0bb627d540b381897b58ea51be64d4

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
e71831791e940865d1a63e54f368547d

SHA1
eb44ba4733adaee762378f27bcb06f3cddd84d7e

SHA256
6c39636c658be640fcbfea3aab464332f3d459ab67a30499aed37f50ccb934e1

SHA512
8215f0e0f2cae610df373b37cbddffd52d2e8a90201981967cdc788046159600b8455170fda41872f78a2fa5ff31a6b45df0fbe544863561df8909c6405a5a2c

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db
Filesize
16KB

MD5
17c5967c00aeec144443be17c49feec0

SHA1
18e399664242edc9538743c39af39055bd4af272

SHA256
ae0981153470c2448b13f735a58e6f45ee0c95f1b3f2a7e65d430493971f7c27

SHA512
df8dfaa2c76fd2300aee3b11e1df481b87b7f677d198bc603103c1307e17d722b415543ee9060c4c58e04a2967fd6012fab38e762fa686ce5e9fde9986acd01b

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
512B

MD5
743bf5547aa50f7b48790981023f67ae

SHA1
9966942e0d841a715d67744a3ee9bf9c21e46526

SHA256
5bc968a586264b2fc43acb30277d75272a843f269c857e144559031c6dc97f94

SHA512
b7ed3311495189f02a8161110c874789a000a5d756337868119890e2742d07370d5d5262eb604104324f8f77c5bf8d9f55f0a087066f0458fbe1e822297c64d6

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
4670fae9c3ecd27eb38471cfa667f15c

SHA1
46f0a0c177a7738cc4e0b43254c64b4c3407c689

SHA256
901cfa722161160dd73cbde0ce1444039375b416277e45cc83bd6bdab9874b96

SHA512
273976755e5b4222991a095f3096c9bf1fd419dc58358290080dc4ee6a16d7af0911f069377fd0f607aaa3d9a005820d03f84090430eed1546551fdb84740e9c

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
4KB

MD5
f8c233e1ac75d8da05f0c4bbe2bc6a1a

SHA1
0e8aaa24053b0c9bc2d5f03009b0364c6989fc22

SHA256
b9c19b9e56f188bb82b469051e25c26e80ed78484dfe99a31976b013b12c6645

SHA512
2f3f2fb4e1f5d4589620607b397efcb409cdecf16b7eb65c461ecc821c223a6cbd0f890d95ed08ae29bffe2860daf7f9a86129de968cbc71ef8317880314b5b2

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
da4fa8dbde6d936e7bb3cdfd08a9f7cc

SHA1
e5b029359516d00f8123aa3900a142474dcd9d89

SHA256
04ec9e7bc28bf179373ea75b946ec64560bdf1943e0847cd930ec8e28c1dadc9

SHA512
4e0a93acef4567571338cb637fc9946ee918fe642d6094cb52ede6d630d17dc7e62a4ddf078d58c3b6135e11cd8404b9b0e6b6f9d058f3cc83755c9306251196

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
e6792dda9d66a824c0215d8216994ab2

SHA1
dd0b94e1a40b7d60cc4ddda46c988d011e0fb096

SHA256
e07c88aecc9b41f888858ad00bd315d77a5637aa06cd8a272c1e0bfbbb396e5a

SHA512
41120da16d46f4e881a38cfdc0f8031390aaf048d836292e8e1c905e9913f1ba6a7bf11b5bbe83a498e3d107f700752fe1ab56413f64e0f77f0efb6c191bb3ed

Download Submit
/data/user/0/com.joeykrim.rootcheck/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
f33661803930346e2bfbf16cdfa9d05a

SHA1
f25a6626a156214221bbd6a0594fd27edbca52f8

SHA256
103ba3bc9efa4217d90e96e6b0a1bcc3514308d9df0d3a409c76a0b69c2b5380

SHA512
959af70c3684bc095703fca794a1d70f7dae1e159d3394e50c0ed12e0ae55f8d307a693ebc794961f2b49b6fd562aaef6a68895194878ad3864053e4b6790d5b

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F396E02DF-0001-1200-B7D11E10A5F5BeginSession.cls_temp
Filesize
77B

MD5
814c1a7fc362e316b918277cb5c61d70

SHA1
e821eae7a214953a9e5798501e238a3d78e41fb6

SHA256
4a6f4fc4d8976e97564fc9a5fb8d70e1e97c7d368a1a76f9daa285578b81d1c7

SHA512
4403c2781eccc44fd62c7c34e8b7539515d8a85ca74fca519cb9d5be450f3d70f84ece5ed35f7f781691784f5d0ef89d1962e5bb3f15f4cca885cc8a738f08c5

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F396E02DF-0001-1200-B7D11E10A5F5BeginSession.json
Filesize
132B

MD5
1d1b095b5d5263ed4a289697a649d468

SHA1
a179f924c8150eedbc809a5c5881ac1495d987ad

SHA256
e1d87fd2517ef80ee1a8546ab3e110a8f874518b7ece93fe1aec3daeeecdc616

SHA512
d98ff1abf5ecef246f64ee6f20c09bd45521494384a9d92fe0dd0be9abf82c9670b8d6dd4c289b30b2d0b7946a248da0b3764aad88fb486c822fd33c3ce48af6

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F396E02DF-0001-1200-B7D11E10A5F5SessionApp.cls_temp
Filesize
118B

MD5
03fc8a1766aa0b4ba1a768b51af77f54

SHA1
ae7dc6f71c0635aee8624dc66c7727c5d2631eb3

SHA256
8894034e530203aa2bbeed5b17c2ef48cac3972db8f6597a05fc3ed3ebe92e3a

SHA512
c63df8d9f0f29acb9174b03bb7b9d4724a388817c0b93b3a97e8bf82c0cdf52f2e57311a7ee450c63c9bd01325b89e7a172d383d9223d9302e38ff6c1edd8c4c

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F396E02DF-0001-1200-B7D11E10A5F5SessionApp.json
Filesize
232B

MD5
1006b9850288fecae33f5f48c269d408

SHA1
6c154aa40cb70c6a42259e93699b2e70fa9b575f

SHA256
90205d01177f69aaea2cb4dad6d6188c8a54ff6b17ebeac86409618c3875f985

SHA512
a84b144716ce02cba033fc7cfd8cbfb2ac47fe40e9881ba66a7eb5975d7171e169045324e8bd3ced2756247c585e5c67b7ab476b76229412ce361fa96082dca9

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F396E02DF-0001-1200-B7D11E10A5F5SessionDevice.cls_temp
Filesize
48B

MD5
fd6372364a5c5c9cf8945ac3ea7a5d94

SHA1
3c798cab71f6ae7a81e71e58712368231230588a

SHA256
7400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641

SHA512
a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F396E02DF-0001-1200-B7D11E10A5F5SessionDevice.json
Filesize
202B

MD5
eeeb942571fa704cf8ae49731fbe9789

SHA1
b5989c4cb932ffc779ee25bb3f7bfb79cf720427

SHA256
78809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71

SHA512
71e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F396E02DF-0001-1200-B7D11E10A5F5SessionOS.cls_temp
Filesize
15B

MD5
b3d9541cc92a9153d14e5160f8d8c008

SHA1
2e1ac80eb381dd82a03795b682f92020348c0113

SHA256
1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

SHA512
78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664F396E02DF-0001-1200-B7D11E10A5F5SessionOS.json
Filesize
55B

MD5
fc1dcee4e422d77e7fab7c08c8a41344

SHA1
d5340127e9d5f735b9d33b9dc61c772fb0e2dc15

SHA256
b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7

SHA512
3ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
436B

MD5
7bf18f2730a4e47fcbff0f8a5cca8945

SHA1
c8f6d15004e6f3ccc03d328e38dd6c724f2e0042

SHA256
fb1e778a6a67427f4ba137de62db3b8a3fa4af2baadfced8d44dea313db98bb8

SHA512
c087c798c681cd338e901c1a627b96a845ab951512e36f266c1800598a196c230e0c203f1ced3b9f4223d1f4669e420c84d287ddaee625f3134b7eff3d33ed0a

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize
1KB

MD5
e82d0cc80dab57d13d88734ab8a5df08

SHA1
a7c9bbba4b9079de27577f536b1734bc077fb264

SHA256
cb76493200c26db24aef91dd91b21391a943904e5efbf4b38c2886d5398898c6

SHA512
a89dd3681d9d3ab0924e7f6404414c1fa24150ce9fdbcb25a3cf1661b0ef23381c4f67f94d1252e6f00fe23c73354fb8dee728744b42c0373e2f4ab3071c1fe4

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_14b89a55-999d-465a-8102-a7040e38411a_1716468086069.tap
Filesize
350B

MD5
27295473b395a63afd4af896675281a7

SHA1
abe6384631c7da3b9b871a68b6d293341e9aac05

SHA256
ab7fd324e81667c23a1f55d06cdbac0d9276cd45e501624a398b4d789f4fca43

SHA512
30e5e473b5873fd415d057d43171284ed5eced3183e5dc73224e7209fc388f99385a574bebb86a08e28fc01ccf0fd24f6f66535810466085babf77e8f4e21f5f

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.YFlurrySenderIndex.info.AnalyticsData_RG6P5WWKVXRC8CPTJZJT_272
Filesize
88B

MD5
e7763d9ccfad7850210e177d43488677

SHA1
b1d2740273da3102473e231a868430062d9baa1b

SHA256
594a9fbbe9639419e21d13a70116fdf99b2ae3a159db8702876f8cab32925db3

SHA512
59e7ab5bcceeec3f08613a0bf512b5c379b06a7f4dacdfcd9ea4cfe8e0b37d0eac07d24b766f2114c146528f39209aa635a7c39eaadf03f5221e4699395511c7

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.YFlurrySenderIndex.info.AnalyticsMain
Filesize
72B

MD5
b624307e7209a4ae62c7bc8071209703

SHA1
adef517ddb0285576ec9fa42e107de8a9cf1af12

SHA256
cf558c8c8aec8c3f36dfe1cf9d20bda6b87922cd8348b514d54a0769b768fa4d

SHA512
0d31e749b568c117972d287f06da79cd0a72e53701e426b311f349cbc94e14512331b9ee756cae23676c8fbc936ed292dacf853c4f5fccef6f09806538d678a9

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/.yflurrydatasenderblock.180d216b-81fa-40ef-bb5b-0b152f016088
Filesize
382B

MD5
a99cb7d5f28c8b6e026355daa3e83d17

SHA1
b8af85b988e278ba4b1d0cf64c379f31cf3d89e3

SHA256
0e9d7a58b9f5bc0da9afb7bfbaafc399cc68e301f97bcda5f6030d1f63241318

SHA512
24a2584633a53693fc89332bfde639dca6f88a5330d5b23182df204dc029e666ef00047894f79bb9b56da34e1967f841f9a466cad93d09ce40b75347de1fc1ee

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/gaClientId
Filesize
36B

MD5
2d550f75acb1ffc33eded9ac70f889f9

SHA1
b0390e6752699804dd2b020d5cabce9477e3e11b

SHA256
ead96968d6b06d014c99f8af1e87fafb635e14b93af333a3143648861c585287

SHA512
39f1ee4d32d33e9f0b8fb4a7bf71e3f0659583f4c4028ca9f90a76b1c440e6ba4bb4ead4cadc4e1767b7a794100923596b8aa56811e5c821d31827981eb480ac

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/gaClientIdData
Filesize
32B

MD5
1d1c779e83c0d8242f4255d086e01385

SHA1
c81dac75ba37c6ffd8327e36f4f1d2e6f4c8ed6d

SHA256
face57b09fdfdbabf997fce2578a8d663f59ed27cae5760ddaf75f0884b06ef0

SHA512
272d4995bf0bbeefb5464552ccc5f3a05326c3954907bd1e87ffbb32e0666e5f03196140fd510bf4b185c9897c858f0dcaaeb1c0342511474ec061c173708372

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/persisted_config
Filesize
74B

MD5
ba2fed69dd7576e6158c2639527379bc

SHA1
6c4a36a79585b8ef2d247d1131aa5e00d799113f

SHA256
4e5489222ad101502ba405f6070f450a019e13db2eaf18b334d48b0b8eafe3fc

SHA512
e3dedfe52e68d8161c69cccd5e0a8e8eec3bfae9c79ace6e6a2632e1e56d189520e99087d564ee50070caf793a9dddaca7a8049cc9c6b7db58918780bf4a5dee

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/persisted_config
Filesize
420B

MD5
0dbec1b2a54cb2c8dec97bf4c6e9f220

SHA1
d51d431f8ba8bf7aa2c24fa9d0ca9c377831109c

SHA256
d8d7697c99fd829f10a28caf44f042afa6612b2a92fcf37f79a0e62c7aae820e

SHA512
7b30f85931b9a8dd9629f548fb643241206b13db779208ed6a68a2cf35725d0da6676f361e269bda7bc09c5b8f1bdd92ce01e3cff72c0edc3b7f51131defa760

Download Submit
/data/user/0/com.joeykrim.rootcheck/files/persisted_config
Filesize
431B

MD5
a486ee1e97b973eca7e7094a57e2e315

SHA1
d4f55f0718f71a2f9784dbb313d36638062d67a7

SHA256
d2f43a456cc2d5be5d6c4d8786b685c7aa705e32c1d1abd6e98bf12cec2db8ca

SHA512
f7b3b45d46c4ce53778b3464bae011d8fbea6aa4f4395473c628bed24135c2cea5ab7da37eaef035ece19915f3aba4cd8fb5953aba3501afe8506069c4a91e3f

Download Submit
/data/user/0/com.joeykrim.rootcheck/no_backup/.flurryNoBackup/installationNum
Filesize
100B

MD5
0904a1739074e32c708cf41b40c7255b

SHA1
176b893bd84fbfe6a0f519acb538c97d6cd0dcbd

SHA256
133c80b9d11e842887444e5c7447d5ce18db558d219888dd628e02c9f9cd5a5e

SHA512
510f0300063820c786e8eb70fdd8c6792062fd136b585e564c15a3b96a4a5cb2c637a17a9e3bc1e0c459e2f58db143a91b38e559156097e4ec4b237abe8035ee

Download Submit
/data/user/0/com.joeykrim.rootcheck/no_backup/com.google.InstanceId.properties
Filesize
2KB

MD5
9085800925ff00a6bd25ac19ef9edb1c

SHA1
a8a0d3f8d073b2d17f3797e9ce1e661594aef8d5

SHA256
4d28b813d6ca366054b0b8dea6ad576bd3244ab237852f793e37f00be65f659d

SHA512
aac81d427343c2c9869a6d31020d56d38530c71c4edf88a1d0ba66d926716757b4ff13917decbe6a7318280db0f7cea33d691e139564f1b1223488bbfeb9bea6

Download Submit