Play interactive tour

Edit tour

Analysis Report be.sciensano.coronalert_1.11.2.apk

Overview

General Information

Sample Name:	be.sciensano.coronalert_1.11.2.apk
Analysis ID:	346306
MD5:	e6328f186a98bcd7ce7c5521a6c16bc4
SHA1:	b9ff85fd796241f33ad1a8f2180a9ff9a48277c0
SHA256:	801e3dacee4bb3954097bb8af4c94a49f18aa9a2527a8300e2c835f7acff0434
Most interesting Screenshot:

Detection

Score:	30
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Requests to ignore battery optimizations

Accesses android OS build fields

Checks an internet connection is available

Checks if phone is rooted (checks for test-keys build tags)

Detected TCP or UDP traffic on non-standard ports

Has functionalty to add an overlay to other apps

Has permission to execute code after phone reboot

Installs a new wake lock (to get activate on phone screen on)

Installs an application shortcut on the screen

Lists and deletes files in the same context

May access the Android keyguard (lock screen)

Opens an internet connection

Performs DNS lookups (Java API)

Queries camera information

Queries list of running processes/tasks

Queries several sensitive phone informations

Queries stored mail and application accounts (e.g. Gmail or Whatsup)

Queries the phones location (GPS)

Requests potentially dangerous permissions

Starts/registers a service/receiver on phone boot (autostart)

Uses reflection

Classification

Yara Overview

No yara matches

Signature Overview

Click to jump to signature section

Show All Signature Results

Location Tracking:

Source: androidx.appcompat.app.TwilightManager;->getLastKnownLocationForProvider:24	API Call: android.location.LocationManager.getLastKnownLocation
Source: androidx.appcompat.app.TwilightManager;->updateState:33	API Call: android.location.Location.getLatitude
Source: androidx.appcompat.app.TwilightManager;->updateState:34	API Call: android.location.Location.getLongitude
Source: androidx.appcompat.app.TwilightManager;->updateState:36	API Call: android.location.Location.getLatitude
Source: androidx.appcompat.app.TwilightManager;->updateState:37	API Call: android.location.Location.getLongitude
Source: androidx.appcompat.app.TwilightManager;->updateState:39	API Call: android.location.Location.getLatitude
Source: androidx.appcompat.app.TwilightManager;->updateState:40	API Call: android.location.Location.getLongitude
Source: androidx.core.location.LocationKt;->component1:3	API Call: android.location.Location.getLatitude
Source: androidx.core.location.LocationKt;->component2:6	API Call: android.location.Location.getLongitude

Compliance:

Uses secure TLS version for HTTPS connections

Show sources

Source: unknown	HTTPS traffic detected: 172.217.17.42:443 -> 192.168.2.30:36796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.234:443 -> 192.168.2.30:56300 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.208.106:443 -> 192.168.2.30:51260 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.20.74:443 -> 192.168.2.30:45802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.19.202:443 -> 192.168.2.30:52328 version: TLS 1.2

Spreading:

Source: androidx.core.content.FileProvider;->parsePathStrategy:63	API Call: android.os.Environment.getExternalStorageDirectory
Source: androidx.core.os.EnvironmentCompat;->getStorageState:2	API Call: android.os.Environment.getExternalStorageState
Source: androidx.core.os.EnvironmentCompat;->getStorageState:5	API Call: android.os.Environment.getExternalStorageDirectory
Source: androidx.core.os.EnvironmentCompat;->getStorageState:8	API Call: android.os.Environment.getExternalStorageState

Networking:

Source: androidx.core.net.ConnectivityManagerCompat;->getNetworkInfoFromBroadcast:5	API Call: android.net.ConnectivityManager.getNetworkInfo
Source: androidx.core.net.ConnectivityManagerCompat;->isActiveNetworkMetered:8	API Call: android.net.ConnectivityManager.getActiveNetworkInfo
Source: androidx.work.impl.constraints.trackers.NetworkStateTracker;->getActiveNetworkState:11	API Call: android.net.ConnectivityManager.getActiveNetworkInfo
Source: androidx.work.impl.constraints.trackers.NetworkStateTracker;->getActiveNetworkState:12	API Call: android.net.NetworkInfo.isConnected

Source: global traffic	TCP traffic: 192.168.2.30:55930 -> 8.8.4.4:853
Source: global traffic	TCP traffic: 192.168.2.30:44520 -> 8.8.8.8:853

Source: org.conscrypt.AbstractConscryptSocket;->connect:40	API Call: org.conscrypt.AbstractConscryptSocket.connect (not executed)
Source: org.conscrypt.AbstractConscryptSocket;->connect:45	API Call: java.net.Socket.connect (not executed)
Source: org.conscrypt.AbstractConscryptSocket;->connect:46	API Call: javax.net.ssl.SSLSocket.connect (not executed)
Source: org.conscrypt.KitKatPlatformOpenSSLSocketImplAdapter;->connect:11	API Call: org.conscrypt.AbstractConscryptSocket.connect (not executed)
Source: org.conscrypt.KitKatPlatformOpenSSLSocketImplAdapter;->connect:13	API Call: org.conscrypt.AbstractConscryptSocket.connect (not executed)
Source: org.conscrypt.PreKitKatPlatformOpenSSLSocketImplAdapter;->connect:11	API Call: org.conscrypt.AbstractConscryptSocket.connect (not executed)
Source: org.conscrypt.PreKitKatPlatformOpenSSLSocketImplAdapter;->connect:13	API Call: org.conscrypt.AbstractConscryptSocket.connect (not executed)
Source: com.airbnb.lottie.network.NetworkFetcher;->fetchFromNetworkInternal:28	API Call: java.net.URL.openConnection (not executed)
Source: okhttp3.internal.platform.AndroidPlatform;->connectSocket:58	API Call: java.net.Socket.connect (not executed)
Source: okhttp3.internal.platform.Platform;->connectSocket:33	API Call: java.net.Socket.connect (not executed)

Source: com.google.gson.internal.bind.TypeAdapters$23;->read:7	API Call: java.net.InetAddress.getByName (not executed)
Source: okhttp3.Dns$Companion$DnsSystem;->lookup:4	API Call: java.net.InetAddress.getAllByName (not executed)

Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.206
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.206
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.17.42
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.168.234

Source: unknown

DNS traffic detected: queries for: time.android.com

Source: $avd_hide_password__0.xml	String found in binary or memory: http://schemas.android.com/aapt
Source: include_tracing_status_card.xml, include_submission_done_further_info.xml, mtrl_calendar_month_navigation.xml, include_statistics_card.xml, include_risk_details_behavior_row.xml, preference.xml, fragment_risk_details.xml, android	String found in binary or memory: http://schemas.android.com/apk/res-auto
Source: include_tracing_status_card.xml, view_tan_input_edittext.xml, test_mtrl_calendar_day_selected.xml, ic_submission_illustration_hotline.xml, mtrl_calendar_month_navigation.xml, ic_settings_illustration_notification_off.xml, btn_radio_off_to_on_mtrl_animation.xml, include_statistics_card.xml, abc_alert_dialog_button_bar_material.xml, include_risk_details_behavior_row.xml, abc_btn_radio_material_anim.xml, design_snackbar_background.xml, preference.xml, ic_main_overview_1.xml, design_text_input_end_icon.xml, common_google_signin_btn_text_light_normal.xml, preference_widget_switch_compat.xml, preference_widget_seekbar.xml, fragment_risk_details.xml, test_toolbar.xml, abc_activity_chooser_view.xml, mtrl_fab_transformation_sheet_expand_spec.xml, $avd_hide_password__0.xml, abc_alert_dialog_title_material.xml, abc_dialog_title_material.xml, mtrl_picker_text_input_date.xml, android	String found in binary or memory: http://schemas.android.com/apk/res/android
Source: include_tracing_status_card.xml	String found in binary or memory: http://schemas.android.com/apk/res/android$$layout/include_tracing_status_card_0
Source: include_submission_done_further_info.xml	String found in binary or memory: http://schemas.android.com/apk/res/android--layout/include_submission_done_further_info_0
Source: privacy_fr.html	String found in binary or memory: http://www.autoriteprotectiondonnees.be
Source: privacy_fr.html	String found in binary or memory: http://www.dataprotectionauthority.be
Source: privacy_fr.html	String found in binary or memory: http://www.gegevensbeschermingsautoriteit.be
Source: libsqlcipher.so	String found in binary or memory: https://android.googlesource.com/toolchain/clang
Source: libsqlcipher.so	String found in binary or memory: https://android.googlesource.com/toolchain/llvm
Source: android	String found in binary or memory: https://c19-submission-prd.ixor.be
Source: android	String found in binary or memory: https://c19-verification-prd.ixor.be
Source: android	String found in binary or memory: https://c19distcdn-prd.ixor.be
Source: android	String found in binary or memory: https://c19statcdn-prd.ixor.be
Source: android	String found in binary or memory: https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings.cryptoKeys#CryptoKey
Source: android	String found in binary or memory: https://coronalert-prd.ixor.be
Source: android	String found in binary or memory: https://developer.android.com/reference/com/google/android/play/core/assetpacks/model/AssetPackError
Source: android	String found in binary or memory: https://developer.android.com/reference/com/google/android/play/core/install/model/InstallErrorCode#
Source: android	String found in binary or memory: https://developer.android.com/reference/com/google/android/play/core/splitinstall/model/SplitInstall
Source: privacy_fr.html	String found in binary or memory: https://github.com/DP-3T/documents.
Source: android	String found in binary or memory: https://issuetracker.google.com/issues/116541301
Source: android	String found in binary or memory: https://play.google.com/store/apps/details?id=be.sciensano.coronalert
Source: android	String found in binary or memory: https://plus.google.com/
Source: privacy_fr.html	String found in binary or memory: https://www.autoriteprotectiondonnees.be
Source: privacy_fr.html	String found in binary or memory: https://www.dataprotectionauthority.be
Source: privacy_fr.html	String found in binary or memory: https://www.gegevensbeschermingsautoriteit.be
Source: privacy_fr.html	String found in binary or memory: https://www.google.com/covid19/exposurenotifications/.
Source: android	String found in binary or memory: https://www.googleapis.com/auth/games
Source: android	String found in binary or memory: https://www.googleapis.com/auth/games_lite

Source: com.airbnb.lottie.network.NetworkFetcher;->fetchFromNetworkInternal:31

API Call: java.net.HttpURLConnection.connect

Source: unknown	Network traffic detected: HTTP traffic on port 52328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 36796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 45802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 35802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 34644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 36796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54284
Source: unknown	Network traffic detected: HTTP traffic on port 38366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 46328
Source: unknown	Network traffic detected: HTTP traffic on port 59474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 43026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52328
Source: unknown	Network traffic detected: HTTP traffic on port 51246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 34644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 37868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 35802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 38366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51234
Source: unknown	Network traffic detected: HTTP traffic on port 56300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 46328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 37868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56294
Source: unknown	Network traffic detected: HTTP traffic on port 51234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51260
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 45802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 43026

Source: unknown	HTTPS traffic detected: 172.217.17.42:443 -> 192.168.2.30:36796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.168.234:443 -> 192.168.2.30:56300 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.208.106:443 -> 192.168.2.30:51260 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.20.74:443 -> 192.168.2.30:45802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.19.202:443 -> 192.168.2.30:52328 version: TLS 1.2

E-Banking Fraud:

Source: androidx.appcompat.app.AppCompatDelegateImpl;->openPanel:323	API Call: WindowManager.addView
Source: androidx.appcompat.widget.TooltipPopup;->show:92	API Call: WindowManager.addView

Operating System Destruction:

Source: androidx.documentfile.provider.RawDocumentFile;->deleteContents:5	API Calls in same method context: File.listFiles,File.delete
Source: okhttp3.internal.io.FileSystem$Companion$SYSTEM$1;->deleteContents:25	API Calls in same method context: File.listFiles,File.delete
Source: com.google.android.play.core.splitcompat.d;->c:15	API Calls in same method context: File.listFiles,File.delete
Source: com.airbnb.lottie.network.NetworkCache;->clear:37	API Calls in same method context: File.listFiles,File.delete
Source: com.google.android.play.core.assetpacks.bc;->c:50	API Calls in same method context: File.listFiles,File.delete
Source: com.google.android.play.core.assetpacks.df;->a:10	API Calls in same method context: File.listFiles,File.delete

Change of System Appearance:

Source: android

String found in binary or memory: keyguard

Source: androidx.core.app.JobIntentService$CompatWorkEnqueuer;->enqueueWork:27	API Call: android.os.PowerManager$WakeLock.acquire
Source: androidx.core.app.JobIntentService$CompatWorkEnqueuer;->serviceProcessingFinished:29	API Call: android.os.PowerManager$WakeLock.acquire
Source: androidx.core.app.JobIntentService$CompatWorkEnqueuer;->serviceProcessingStarted:33	API Call: android.os.PowerManager$WakeLock.acquire
Source: androidx.legacy.content.WakefulBroadcastReceiver;->startWakefulService:32	API Call: android.os.PowerManager$WakeLock.acquire
Source: de.rki.coronawarnapp.CoronaWarnApplication$onCreate$1;->invokeSuspend:32	API Call: android.os.PowerManager$WakeLock.acquire
Source: androidx.work.impl.Processor;->startForeground:80	API Call: android.os.PowerManager$WakeLock.acquire
Source: androidx.work.impl.background.systemalarm.DelayMetCommandHandler;->handleProcessWork:84	API Call: android.os.PowerManager$WakeLock.acquire
Source: androidx.work.impl.background.systemalarm.SystemAlarmDispatcher$1;->run:36	API Call: android.os.PowerManager$WakeLock.acquire
Source: androidx.work.impl.background.systemalarm.SystemAlarmDispatcher;->processCommand:36	API Call: android.os.PowerManager$WakeLock.acquire

System Summary:

Requests to ignore battery optimizations

Show sources

Source: Lde/rki/coronawarnapp/util/ExternalActionHelper;->disableBatteryOptimizations(Landroid/content/Context;)V

Method string: "android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS"

Source: submitted apk	Request permission: android.permission.BLUETOOTH
Source: submitted apk	Request permission: android.permission.INTERNET
Source: submitted apk	Request permission: android.permission.WAKE_LOCK

Source: classification engine

Classification label: sus30.andAPK@0/253@1/0

Source: net.sqlcipher.database.SQLiteDatabase;->getQueryStats:519

API Call: net.sqlcipher.database.SQLiteDatabase.execSQL

Source: org.conscrypt.NativeCryptoJni;->init:7	API Call: java.lang.System.loadLibrary ("conscrypt_gmscore_jni")
Source: org.conscrypt.NativeCryptoJni;->init:9	API Call: java.lang.System.loadLibrary ("conscrypt_jni")
Source: net.sqlcipher.database.SQLiteDatabase$1;->loadLibraries:2	API Call: java.lang.System.loadLibrary
Source: com.google.android.play.core.splitinstall.SplitInstallHelper;->loadLibrary:4	API Call: java.lang.System.loadLibrary

Source: be.sciensano.coronalert.storage.LocalDataKt;->dataTransfer:14	API Call: android.content.SharedPreferences.getBoolean
Source: be.sciensano.coronalert.storage.LocalDataKt;->isTestResultNegative:39	API Call: android.content.SharedPreferences.getBoolean
Source: be.sciensano.coronalert.storage.LocalDataKt;->k:58	API Call: android.content.SharedPreferences.getString
Source: be.sciensano.coronalert.storage.LocalDataKt;->onsetSymptomsDate:158	API Call: android.content.SharedPreferences.getString
Source: be.sciensano.coronalert.storage.LocalDataKt;->r0:174	API Call: android.content.SharedPreferences.getString
Source: be.sciensano.coronalert.storage.LocalDataKt;->t0:252	API Call: android.content.SharedPreferences.getString
Source: be.sciensano.coronalert.storage.LocalDataKt;->t3:270	API Call: android.content.SharedPreferences.getString
Source: com.google.crypto.tink.integration.android.SharedPrefKeysetReader;->readPref:9	API Call: android.content.SharedPreferences.getString
Source: androidx.core.app.AppLaunchChecker;->hasStartedFromLauncher:5	API Call: android.content.SharedPreferences.getBoolean
Source: androidx.core.app.AppLaunchChecker;->onActivityCreate:9	API Call: android.content.SharedPreferences.getBoolean
Source: androidx.security.crypto.EncryptedSharedPreferences;->getDecryptedObject:37	API Call: android.content.SharedPreferences.getString
Source: com.google.android.gms.auth.api.signin.internal.Storage;->zac:50	API Call: android.content.SharedPreferences.getString
Source: androidx.preference.Preference;->getPersistedBoolean:144	API Call: android.content.SharedPreferences.getBoolean
Source: androidx.preference.Preference;->getPersistedString:176	API Call: android.content.SharedPreferences.getString
Source: androidx.preference.PreferenceManager;->setDefaultValues:18	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.util.security.SecurityHelper;->getStoredDbPassword:11	API Call: android.content.SharedPreferences.getString
Source: de.rki.coronawarnapp.storage.LocalData;->authCode:9	API Call: android.content.SharedPreferences.getString
Source: de.rki.coronawarnapp.storage.LocalData;->backgroundNotification:32	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.storage.LocalData;->googleApiToken:54	API Call: android.content.SharedPreferences.getString
Source: de.rki.coronawarnapp.storage.LocalData;->isAllowedToSubmitDiagnosisKeys:111	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.storage.LocalData;->isBackgroundCheckDone:135	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.storage.LocalData;->isBackgroundJobEnabled:140	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.storage.LocalData;->isMobileDataEnabled:145	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.storage.LocalData;->isNotificationsRiskEnabled:150	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.storage.LocalData;->isNotificationsTestEnabled:155	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.storage.LocalData;->isOnboarded:169	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.storage.LocalData;->isTestResultNotificationSent:183	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.storage.LocalData;->last3HoursMode:197	API Call: android.content.SharedPreferences.getBoolean
Source: de.rki.coronawarnapp.storage.LocalData;->registrationToken:317	API Call: android.content.SharedPreferences.getString
Source: de.rki.coronawarnapp.storage.LocalData;->teletan:331	API Call: android.content.SharedPreferences.getString
Source: de.rki.coronawarnapp.storage.LocalData;->testGUID:345	API Call: android.content.SharedPreferences.getString
Source: de.rki.coronawarnapp.storage.LocalData;->tracingExplanationDialogWasShown:427	API Call: android.content.SharedPreferences.getBoolean
Source: androidx.work.impl.utils.PreferenceUtils;->migrateLegacyPreferences:10	API Call: android.content.SharedPreferences.getBoolean

Source: com.google.zxing.client.android.AmbientLightManager;->start:18

API Call: android.hardware.SensorManager.registerListener

Data Obfuscation:

Source: androidx.activity.ImmLeaksCleaner;->onStateChanged:17	API Call: java.lang.reflect.Field.get
Source: androidx.activity.ImmLeaksCleaner;->onStateChanged:19	API Call: java.lang.reflect.Field.get
Source: kotlinx.coroutines.android.AndroidExceptionPreHandler;->handleException:14	API Call: java.lang.reflect.Method.invoke
Source: kotlinx.coroutines.android.HandlerDispatcherKt;->asHandler:14	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.android.AndroidSocketAdapter;->configureTlsExtensions:26	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.android.AndroidSocketAdapter;->configureTlsExtensions:28	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.android.AndroidSocketAdapter;->configureTlsExtensions:32	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.android.AndroidSocketAdapter;->getSelectedProtocol:39	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.android.CloseGuard;->createAndOpen:6	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.android.CloseGuard;->createAndOpen:9	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.android.CloseGuard;->warnIfOpen:12	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.common.api.GoogleApi;->zaa:70	API Call: java.lang.reflect.Method.invoke
Source: androidx.legacy.app.ActionBarDrawerToggle;->setActionBarDescription:41	API Call: java.lang.reflect.Method.invoke
Source: androidx.legacy.app.ActionBarDrawerToggle;->setActionBarUpIndicator:63	API Call: java.lang.reflect.Method.invoke
Source: androidx.legacy.app.ActionBarDrawerToggle;->setActionBarUpIndicator:67	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.app.ActivityRecreator$3;->run:8	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.app.ActivityRecreator$3;->run:13	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.app.ActivityRecreator;->queueOnStopIfNecessary:38	API Call: java.lang.reflect.Field.get
Source: androidx.core.app.ActivityRecreator;->queueOnStopIfNecessary:40	API Call: java.lang.reflect.Field.get
Source: androidx.core.app.ActivityRecreator;->recreate:53	API Call: java.lang.reflect.Field.get
Source: androidx.core.app.ActivityRecreator;->recreate:55	API Call: java.lang.reflect.Field.get
Source: androidx.core.app.ActivityRecreator;->recreate:68	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.app.BundleCompat$BundleCompatBaseImpl;->getBinder:9	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.app.BundleCompat$BundleCompatBaseImpl;->putBinder:19	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.app.NotificationCompatJellybean;->getAction:52	API Call: java.lang.reflect.Field.get
Source: androidx.core.app.NotificationCompatJellybean;->getAction:54	API Call: java.lang.reflect.Field.get
Source: androidx.core.app.NotificationCompatJellybean;->getActionObjectsLocked:86	API Call: java.lang.reflect.Field.get
Source: androidx.core.app.NotificationCompatJellybean;->getExtras:134	API Call: java.lang.reflect.Field.get
Source: androidx.core.app.NotificationManagerCompat;->areNotificationsEnabled:49	API Call: java.lang.reflect.Field.get
Source: androidx.core.app.NotificationManagerCompat;->areNotificationsEnabled:53	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.app.ActionBarDrawerToggleHoneycomb;->setActionBarDescription:11	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.app.ActionBarDrawerToggleHoneycomb;->setActionBarUpIndicator:22	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.app.ActionBarDrawerToggleHoneycomb;->setActionBarUpIndicator:25	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.app.AppCompatViewInflater$DeclaredOnClickListener;->onClick:41	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.app.ResourcesFlusher;->flushLollipops:12	API Call: java.lang.reflect.Field.get
Source: androidx.appcompat.app.ResourcesFlusher;->flushMarshmallows:23	API Call: java.lang.reflect.Field.get
Source: androidx.appcompat.app.ResourcesFlusher;->flushNougats:34	API Call: java.lang.reflect.Field.get
Source: androidx.appcompat.app.ResourcesFlusher;->flushNougats:44	API Call: java.lang.reflect.Field.get
Source: androidx.appcompat.app.ResourcesFlusher;->flushThemedResourcesCache:60	API Call: java.lang.reflect.Field.get
Source: com.google.common.base.FinalizableReferenceQueue;-><init>:14	API Call: java.lang.reflect.Method.invoke
Source: com.google.common.base.Throwables;->getJLA:29	API Call: java.lang.reflect.Method.invoke
Source: com.google.common.base.Throwables;->getSizeMethod:41	API Call: java.lang.reflect.Method.invoke
Source: com.google.common.base.Throwables;->invokeAccessibleNonThrowingMethod:46	API Call: java.lang.reflect.Method.invoke
Source: com.google.gson.internal.bind.ReflectiveTypeAdapterFactory$1;->write:7	API Call: java.lang.reflect.Field.get
Source: com.google.gson.internal.bind.ReflectiveTypeAdapterFactory$1;->writeField:16	API Call: java.lang.reflect.Field.get
Source: com.google.common.cache.Striped64$1;->run:5	API Call: java.lang.reflect.Field.get
Source: com.google.android.material.chip.Chip;->handleAccessibilityExit:77	API Call: java.lang.reflect.Field.get
Source: com.google.android.material.chip.Chip;->handleAccessibilityExit:85	API Call: java.lang.reflect.Method.invoke
Source: com.google.common.util.concurrent.AbstractFuture$UnsafeAtomicHelper$1;->run:5	API Call: java.lang.reflect.Field.get
Source: com.google.common.util.concurrent.MoreExecutors;->isAppEngineWithApiClasses:54	API Call: java.lang.reflect.Method.invoke
Source: com.google.common.util.concurrent.MoreExecutors;->platformThreadFactory:72	API Call: java.lang.reflect.Method.invoke
Source: com.google.common.util.concurrent.SimpleTimeLimiter$1$1;->call:6	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.DuckTypedPSKKeyManager;->chooseClientKeyIdentity:29	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.DuckTypedPSKKeyManager;->chooseClientKeyIdentity:37	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.DuckTypedPSKKeyManager;->chooseServerKeyIdentityHint:45	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.DuckTypedPSKKeyManager;->chooseServerKeyIdentityHint:53	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.DuckTypedPSKKeyManager;->getKey:61	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.DuckTypedPSKKeyManager;->getKey:69	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->checkTrusted:37	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->fromGCMParameterSpec:79	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->fromGCMParameterSpec:81	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->getCurveName:93	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->getFileDescriptor:104	API Call: java.lang.reflect.Field.get
Source: org.conscrypt.Platform;->getFileDescriptor:108	API Call: java.lang.reflect.Field.get
Source: org.conscrypt.Platform;->getHostStringFromInetSocketAddress:114	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->getOriginalHostNameFromInetAddress:124	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->getOriginalHostNameFromInetAddress:125	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->getSSLParametersFromImpl:142	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->getSSLParametersFromImpl:149	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->getSniHostnameFromParams:153	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->logEvent:194	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->logEvent:206	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->oidToAlgorithmName:222	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->oidToAlgorithmName:231	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->oidToAlgorithmName:232	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->setCurveName:248	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->setParametersSniHostname:258	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->setParametersSniHostname:268	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->setSSLParametersOnImpl:282	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->setSSLParametersOnImpl:287	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->setSocketWriteTimeout:304	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->setSocketWriteTimeout:313	API Call: java.lang.reflect.Field.get
Source: org.conscrypt.Platform;->setSocketWriteTimeout:336	API Call: java.lang.reflect.Field.get
Source: org.conscrypt.Platform;->setSocketWriteTimeout:337	API Call: java.lang.reflect.Field.get
Source: org.conscrypt.Platform;->setSocketWriteTimeout:338	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->wrapRsaKey:380	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.Platform;->wrapRsaKey:393	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.TrustManagerImpl;->getOcspDataFromSession:174	API Call: java.lang.reflect.Method.invoke
Source: org.conscrypt.TrustManagerImpl;->getTlsSctDataFromSession:184	API Call: java.lang.reflect.Method.invoke
Source: kotlinx.coroutines.CommonPool;->createPool:26	API Call: java.lang.reflect.Method.invoke
Source: kotlinx.coroutines.CommonPool;->isGoodCommonPool$kotlinx_coroutines_core:63	API Call: java.lang.reflect.Method.invoke
Source: net.sqlcipher.database.SQLiteContentHelper;->getBlobColumnAsAssetFile:7	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.drawable.DrawableCompat;->getLayoutDirection:25	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.drawable.DrawableCompat;->setLayoutDirection:46	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.drawable.IconCompat;->getResId:124	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.drawable.IconCompat;->getResPackage:135	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.drawable.IconCompat;->getType:155	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.drawable.IconCompat;->getUri:178	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.drawable.WrappedDrawableApi21;->isProjected:19	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.dynamic.ObjectWrapper;->unwrap:9	API Call: java.lang.reflect.Field.get
Source: com.google.android.gms.dynamite.DynamiteModule;->getLocalVersion:29	API Call: java.lang.reflect.Field.get
Source: com.google.android.gms.dynamite.DynamiteModule;->getLocalVersion:31	API Call: java.lang.reflect.Field.get
Source: com.google.android.gms.dynamite.DynamiteModule;->zza:152	API Call: java.lang.reflect.Field.get
Source: com.google.common.eventbus.Subscriber;->invokeSubscriberMethod:31	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatApi21Impl;->addFontWeightStyle:6	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatApi21Impl;->createFromFamiliesWithDefault:14	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatApi24Impl;->addFontWeightStyle:22	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatApi24Impl;->createFromFamiliesWithDefault:28	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatApi26Impl;->abortCreation:19	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatApi28Impl;->createFromFamiliesWithDefault:9	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatApi26Impl;->addFontFromAssetManager:27	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatApi26Impl;->addFontFromBuffer:33	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatApi26Impl;->freeze:36	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatApi26Impl;->createFromFamiliesWithDefault:51	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.graphics.TypefaceCompatBaseImpl;->getUniqueKey:18	API Call: java.lang.reflect.Field.get
Source: com.google.gson.FieldAttributes;->get:4	API Call: java.lang.reflect.Field.get
Source: com.google.common.hash.LittleEndianByteArray$UnsafeByteArray$3;->run:5	API Call: java.lang.reflect.Field.get
Source: com.google.common.hash.Striped64$1;->run:5	API Call: java.lang.reflect.Field.get
Source: kotlinx.coroutines.internal.ConcurrentKt;->removeFutureOnCancel:8	API Call: java.lang.reflect.Method.invoke
Source: kotlin.coroutines.jvm.internal.DebugMetadataKt;->getLabel:21	API Call: java.lang.reflect.Field.get
Source: kotlin.coroutines.jvm.internal.ModuleNameRetriever;->getModuleName:27	API Call: java.lang.reflect.Method.invoke
Source: kotlin.coroutines.jvm.internal.ModuleNameRetriever;->getModuleName:29	API Call: java.lang.reflect.Method.invoke
Source: kotlin.coroutines.jvm.internal.ModuleNameRetriever;->getModuleName:31	API Call: java.lang.reflect.Method.invoke
Source: kotlin.internal.PlatformImplementations;->addSuppressed:7	API Call: java.lang.reflect.Method.invoke
Source: kotlin.internal.PlatformImplementations;->getSuppressed:18	API Call: java.lang.reflect.Method.invoke
Source: com.google.common.base.internal.Finalizer;->cleanUp:10	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.Util;->readFieldOrNull:314	API Call: java.lang.reflect.Field.get
Source: com.google.gson.internal.UnsafeAllocator$1;->newInstance:5	API Call: java.lang.reflect.Method.invoke
Source: com.google.gson.internal.UnsafeAllocator$2;->newInstance:5	API Call: java.lang.reflect.Method.invoke
Source: com.google.gson.internal.UnsafeAllocator$3;->newInstance:4	API Call: java.lang.reflect.Method.invoke
Source: com.google.gson.internal.UnsafeAllocator;->create:25	API Call: java.lang.reflect.Field.get
Source: com.google.gson.internal.UnsafeAllocator;->create:32	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.play.core.internal.bk;->a:11	API Call: java.lang.reflect.Field.get
Source: com.google.android.play.core.internal.bl;->a:4	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.play.core.internal.bl;->a:10	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.play.core.internal.bl;->a:16	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.play.core.internal.bl;->a:23	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.play.core.internal.cd;-><clinit>:5	API Call: java.lang.reflect.Field.get
Source: com.google.common.io.Closer$SuppressingSuppressor;->suppress:8	API Call: java.lang.reflect.Method.invoke
Source: androidx.lifecycle.ClassesInfoCache$MethodReference;->invokeCallback:14	API Call: java.lang.reflect.Method.invoke
Source: androidx.lifecycle.ClassesInfoCache$MethodReference;->invokeCallback:16	API Call: java.lang.reflect.Method.invoke
Source: androidx.lifecycle.ClassesInfoCache$MethodReference;->invokeCallback:18	API Call: java.lang.reflect.Method.invoke
Source: androidx.media.AudioAttributesImplApi21;->getLegacyStreamType:30	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.view.menu.MenuItemWrapperICS;->setExclusiveCheckable:98	API Call: java.lang.reflect.Method.invoke
Source: androidx.navigation.NavArgsLazy;->getValue:23	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.os.TraceCompat;->beginAsyncSection:27	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.os.TraceCompat;->endAsyncSection:36	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.os.TraceCompat;->isEnabled:44	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.os.TraceCompat;->setCounter:53	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.AndroidPlatform$CustomTrustRootIndex;->findByIssuerAndSignature:26	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.Jdk8WithJettyBootPlatform$AlpnProvider;->invoke:44	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.Jdk8WithJettyBootPlatform;->afterHandshake:17	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.Jdk8WithJettyBootPlatform;->configureTlsExtensions:33	API Call: java.lang.reflect.Method.invoke
Source: okhttp3.internal.platform.Jdk8WithJettyBootPlatform;->getSelectedProtocol:40	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.content.pm.ShortcutManagerCompat;->getShortcutInfoSaverInstance:38	API Call: java.lang.reflect.Method.invoke
Source: com.google.common.primitives.UnsignedBytes$LexicographicalComparatorHolder$UnsafeComparator$1;->run:5	API Call: java.lang.reflect.Field.get
Source: retrofit2.converter.protobuf.ProtoConverterFactory;->responseBodyConverter:9	API Call: java.lang.reflect.Method.invoke
Source: retrofit2.converter.protobuf.ProtoConverterFactory;->responseBodyConverter:12	API Call: java.lang.reflect.Field.get
Source: com.google.crypto.tink.shaded.protobuf.ExtensionRegistryFactory;->invokeSubclassFactory:11	API Call: java.lang.reflect.Method.invoke
Source: com.google.crypto.tink.shaded.protobuf.ExtensionRegistryLite;->add:25	API Call: java.lang.reflect.Method.invoke
Source: com.google.crypto.tink.shaded.protobuf.GeneratedMessageLite$SerializedForm;->readResolveFallback:10	API Call: java.lang.reflect.Field.get
Source: com.google.crypto.tink.shaded.protobuf.GeneratedMessageLite$SerializedForm;->readResolve:47	API Call: java.lang.reflect.Field.get
Source: com.google.crypto.tink.shaded.protobuf.GeneratedMessageLite;->invokeOrDie:48	API Call: java.lang.reflect.Method.invoke
Source: com.google.crypto.tink.shaded.protobuf.Internal;->getDefaultInstance:44	API Call: java.lang.reflect.Method.invoke
Source: com.google.crypto.tink.shaded.protobuf.ManifestSchemaFactory;->getDescriptorMessageInfoFactory:14	API Call: java.lang.reflect.Method.invoke
Source: com.google.crypto.tink.shaded.protobuf.UnsafeUtil$1;->run:5	API Call: java.lang.reflect.Field.get
Source: com.google.crypto.tink.shaded.protobuf.UnsafeUtil$Android32MemoryAccessor;->getStaticObject:15	API Call: java.lang.reflect.Field.get
Source: com.google.crypto.tink.shaded.protobuf.UnsafeUtil$Android64MemoryAccessor;->getStaticObject:15	API Call: java.lang.reflect.Field.get
Source: com.google.protobuf.ExtensionRegistryFactory;->invokeSubclassFactory:13	API Call: java.lang.reflect.Method.invoke
Source: com.google.protobuf.ExtensionRegistryLite;->add:24	API Call: java.lang.reflect.Method.invoke
Source: com.google.protobuf.GeneratedMessageLite$SerializedForm;->readResolveFallback:11	API Call: java.lang.reflect.Field.get
Source: com.google.protobuf.GeneratedMessageLite$SerializedForm;->readResolve:46	API Call: java.lang.reflect.Field.get
Source: com.google.protobuf.GeneratedMessageLite;->invokeOrDie:33	API Call: java.lang.reflect.Method.invoke
Source: com.google.protobuf.Internal;->getDefaultInstance:43	API Call: java.lang.reflect.Method.invoke
Source: com.google.protobuf.UnsafeUtil$1;->run:5	API Call: java.lang.reflect.Field.get
Source: com.google.common.reflect.Invokable$MethodInvokable;->invokeInternal:13	API Call: java.lang.reflect.Method.invoke
Source: com.google.common.reflect.Types$JavaVersion$3;->typeName:6	API Call: java.lang.reflect.Method.invoke
Source: com.google.common.reflect.Types$TypeVariableInvocationHandler;->invoke:15	API Call: java.lang.reflect.Method.invoke
Source: com.google.gson.internal.reflect.UnsafeReflectionAccessor;->getUnsafeInstance:11	API Call: java.lang.reflect.Field.get
Source: com.google.gson.internal.reflect.UnsafeReflectionAccessor;->makeAccessibleWithUnsafe:29	API Call: java.lang.reflect.Method.invoke
Source: com.google.gson.internal.reflect.UnsafeReflectionAccessor;->makeAccessibleWithUnsafe:39	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.content.res.ResourcesCompat$ThemeCompat$ImplApi23;->rebase:12	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.common.server.response.FastJsonResponse;->getFieldValue:76	API Call: java.lang.reflect.Method.invoke
Source: retrofit2.Retrofit$1;->invoke:4	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.security.ProviderInstaller;->installIfNeeded:18	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.play.core.splitinstall.SplitInstallHelper;->updateAppInfo:29	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.play.core.splitinstall.SplitInstallHelper;->updateAppInfo:33	API Call: java.lang.reflect.Field.get
Source: com.google.android.play.core.splitinstall.SplitInstallHelper;->updateAppInfo:40	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.text.ICUCompat;->addLikelySubtags:17	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.text.ICUCompat;->getScript:23	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.text.ICUCompat;->maximizeAndGetScript:31	API Call: java.lang.reflect.Method.invoke
Source: org.joda.time.DateTimeUtils;->getDateFormatSymbols:44	API Call: java.lang.reflect.Method.invoke
Source: androidx.transition.CanvasUtils;->enableZ:12	API Call: java.lang.reflect.Method.invoke
Source: androidx.transition.CanvasUtils;->enableZ:15	API Call: java.lang.reflect.Method.invoke
Source: androidx.transition.GhostViewPlatform;->addGhost:4	API Call: java.lang.reflect.Method.invoke
Source: androidx.transition.GhostViewPlatform;->removeGhost:31	API Call: java.lang.reflect.Method.invoke
Source: androidx.transition.ImageViewUtils;->animateTransform:19	API Call: java.lang.reflect.Field.get
Source: androidx.transition.ViewGroupUtils;->getChildDrawingOrder:12	API Call: java.lang.reflect.Method.invoke
Source: androidx.transition.ViewGroupUtilsApi14;->cancelLayoutTransition:9	API Call: java.lang.reflect.Method.invoke
Source: androidx.transition.ViewOverlayApi14$OverlayViewGroup;->invalidateChildInParentFast:78	API Call: java.lang.reflect.Method.invoke
Source: androidx.transition.ViewUtilsBase;->setLeftTopRightBottom:50	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.common.util.WorkSourceUtil;->fromPackageAndModuleExperimentalPi:33	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.common.util.WorkSourceUtil;->fromPackageAndModuleExperimentalPi:36	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.common.util.WorkSourceUtil;->fromPackageAndModuleExperimentalPi:39	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.common.util.WorkSourceUtil;->zza:72	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.common.util.WorkSourceUtil;->zza:81	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.common.util.WorkSourceUtil;->zza:94	API Call: java.lang.reflect.Method.invoke
Source: com.google.android.gms.common.util.WorkSourceUtil;->zza:98	API Call: java.lang.reflect.Method.invoke
Source: androidx.work.impl.utils.ProcessUtils;->getProcessName:11	API Call: java.lang.reflect.Method.invoke
Source: androidx.work.impl.utils.ProcessUtils;->getProcessName:18	API Call: java.lang.reflect.Method.invoke
Source: androidx.work.impl.utils.ProcessUtils;->getProcessName:19	API Call: java.lang.reflect.Method.invoke
Source: androidx.versionedparcelable.VersionedParcel;->readFromParcel:194	API Call: java.lang.reflect.Method.invoke
Source: androidx.versionedparcelable.VersionedParcel;->writeToParcel:401	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.view.DisplayCompat;->getSystemProperty:30	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.view.KeyEventDispatcher;->actionBarOnMenuKeyEventPre28:6	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.view.KeyEventDispatcher;->getDialogKeyListenerPre28:38	API Call: java.lang.reflect.Field.get
Source: androidx.core.view.ViewConfigurationCompat;->getLegacyScrollFactor:8	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.view.ViewCompat;->dispatchFinishTemporaryDetach:63	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.view.ViewCompat;->dispatchStartTemporaryDetach:85	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.view.ViewCompat;->getAccessibilityDelegateThroughReflection:110	API Call: java.lang.reflect.Field.get
Source: androidx.core.view.ViewCompat;->getMinimumHeight:160	API Call: java.lang.reflect.Field.get
Source: androidx.core.view.ViewCompat;->getMinimumWidth:167	API Call: java.lang.reflect.Field.get
Source: androidx.core.view.ViewCompat;->setChildrenDrawingOrderEnabled:399	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.view.WindowInsetsCompat$BuilderImpl20;->createWindowInsetsInstance:11	API Call: java.lang.reflect.Field.get
Source: androidx.appcompat.view.SupportMenuInflater$InflatedOnMenuItemClickListener;->onMenuItemClick:21	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.view.SupportMenuInflater$InflatedOnMenuItemClickListener;->onMenuItemClick:25	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.widget.CompoundButtonCompat;->getButtonDrawable:10	API Call: java.lang.reflect.Field.get
Source: androidx.core.widget.PopupWindowCompat;->getOverlapAnchor:10	API Call: java.lang.reflect.Field.get
Source: androidx.core.widget.PopupWindowCompat;->getWindowLayoutType:19	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.widget.PopupWindowCompat;->setWindowLayoutType:40	API Call: java.lang.reflect.Method.invoke
Source: androidx.core.widget.TextViewCompat$OreoCallback;->recomputeProcessTextMenuItems:58	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.AppCompatTextViewAutoSizeHelper;->accessAndReturnWithDefault:7	API Call: java.lang.reflect.Field.get
Source: androidx.appcompat.widget.DrawableUtils;->getOpticalBounds:32	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.AppCompatTextViewAutoSizeHelper;->invokeAndReturnWithDefault:119	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.AppCompatTextViewAutoSizeHelper;->setRawTextSize:142	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.MenuPopupWindow;->setTouchModal:21	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.ListPopupWindow;->getMaxAvailableHeight:123	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.ListPopupWindow;->setPopupClipToScreenEnabled:139	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.ListPopupWindow;->show:327	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.SearchView$AutoCompleteTextViewReflector;->doAfterTextChanged:13	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.SearchView$AutoCompleteTextViewReflector;->doBeforeTextChanged:15	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.SearchView$AutoCompleteTextViewReflector;->ensureImeVisible:18	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.ViewUtils;->computeFitSystemWindows:11	API Call: java.lang.reflect.Method.invoke
Source: androidx.appcompat.widget.ViewUtils;->makeOptionalFitsSystemWindows:23	API Call: java.lang.reflect.Method.invoke
Source: androidx.slidingpanelayout.widget.SlidingPaneLayout;->invalidateChildRegion:130	API Call: java.lang.reflect.Method.invoke

Persistence and Installation Behavior:

Source: androidx.core.content.pm.ShortcutInfoCompat;->addToIntent:32

API Call: android.content.Intent.putExtra android.intent.extra.shortcut.INTENT

Boot Survival:

Source: submitted apk

Request permission: android.permission.RECEIVE_BOOT_COMPLETED

Source: androidx.core.app.JobIntentService$CompatWorkEnqueuer;-><init>:11	API Call: android.os.PowerManager.newWakeLock
Source: androidx.core.app.JobIntentService$CompatWorkEnqueuer;-><init>:19	API Call: android.os.PowerManager.newWakeLock
Source: androidx.legacy.content.WakefulBroadcastReceiver;->startWakefulService:30	API Call: android.os.PowerManager.newWakeLock
Source: de.rki.coronawarnapp.CoronaWarnApplication$onCreate$1;->invokeSuspend:31	API Call: android.os.PowerManager.newWakeLock
Source: androidx.work.impl.utils.WakeLocks;->newWakeLock:28	API Call: android.os.PowerManager.newWakeLock

Source: androidx.work.impl.background.systemalarm.RescheduleReceiver;->onReceive:17

API Call: android.content.Context.startService (not executed)

Hooking and other Techniques for Hiding and Protection:

Source: androidx.work.impl.utils.ProcessUtils;->getProcessName:27

API Call: android.app.ActivityManager.getRunningAppProcesses

Source: be.sciensano.coronalert.MobileTestId$Companion;->generateK:95	API Call: javax.crypto.KeyGenerator.generateKey
Source: com.google.crypto.tink.integration.android.AndroidKeystoreAesGcm;->decrypt:22	API Call: javax.crypto.Cipher.getInstance
Source: com.google.crypto.tink.integration.android.AndroidKeystoreAesGcm;->decrypt:24	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.integration.android.AndroidKeystoreAesGcm;->decrypt:26	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.integration.android.AndroidKeystoreAesGcm;->encrypt:30	API Call: javax.crypto.Cipher.getInstance
Source: com.google.crypto.tink.integration.android.AndroidKeystoreAesGcm;->encrypt:32	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.integration.android.AndroidKeystoreAesGcm;->encrypt:34	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.integration.android.AndroidKeystoreKmsClient;->generateNewAeadKey:27	API Call: javax.crypto.KeyGenerator.generateKey
Source: com.google.android.play.core.assetpacks.dd;->a:68	API Call: java.security.MessageDigest.getInstance
Source: com.google.android.play.core.assetpacks.dd;->a:74	API Call: java.security.MessageDigest.update
Source: com.google.android.play.core.assetpacks.dd;->a:78	API Call: java.security.MessageDigest.digest
Source: com.google.android.gms.common.zzl;->zza:12	API Call: java.security.MessageDigest.digest
Source: org.conscrypt.CryptoUpcalls;->rsaOpWithPrivateKey:55	API Call: javax.crypto.Cipher.getInstance
Source: org.conscrypt.CryptoUpcalls;->rsaOpWithPrivateKey:56	API Call: javax.crypto.Cipher.init
Source: org.conscrypt.CryptoUpcalls;->rsaOpWithPrivateKey:72	API Call: javax.crypto.Cipher.getInstance
Source: org.conscrypt.CryptoUpcalls;->rsaOpWithPrivateKey:73	API Call: javax.crypto.Cipher.init
Source: org.conscrypt.CryptoUpcalls;->rsaOpWithPrivateKey:81	API Call: javax.crypto.Cipher.doFinal
Source: org.conscrypt.NativeCrypto;->X509_NAME_hash:66	API Call: java.security.MessageDigest.getInstance
Source: org.conscrypt.NativeCrypto;->X509_NAME_hash:68	API Call: java.security.MessageDigest.digest
Source: androidx.security.crypto.MasterKeys;->generateKey:15	API Call: javax.crypto.KeyGenerator.generateKey
Source: org.conscrypt.ct.CTLogInfo;-><init>:3	API Call: java.security.MessageDigest.getInstance
Source: org.conscrypt.ct.CTLogInfo;-><init>:5	API Call: java.security.MessageDigest.digest
Source: org.conscrypt.ct.CertificateEntry;->createForPrecertificate:18	API Call: java.security.MessageDigest.getInstance
Source: org.conscrypt.ct.CertificateEntry;->createForPrecertificate:19	API Call: java.security.MessageDigest.update
Source: org.conscrypt.ct.CertificateEntry;->createForPrecertificate:20	API Call: java.security.MessageDigest.digest
Source: com.google.common.hash.MessageDigestHashFunction$MessageDigestHasher;->hash:9	API Call: java.security.MessageDigest.digest
Source: com.google.common.hash.MessageDigestHashFunction$MessageDigestHasher;->hash:12	API Call: java.security.MessageDigest.digest
Source: com.google.common.hash.MessageDigestHashFunction$MessageDigestHasher;->update:17	API Call: java.security.MessageDigest.update
Source: com.google.common.hash.MessageDigestHashFunction$MessageDigestHasher;->update:20	API Call: java.security.MessageDigest.update
Source: com.google.common.hash.MessageDigestHashFunction$MessageDigestHasher;->update:23	API Call: java.security.MessageDigest.update
Source: com.google.common.hash.MessageDigestHashFunction;->getMessageDigest:15	API Call: java.security.MessageDigest.getInstance
Source: com.google.android.play.core.internal.a;->a:13	API Call: java.security.MessageDigest.update
Source: com.google.android.play.core.internal.c;->a:7	API Call: java.security.MessageDigest.update
Source: com.google.android.play.core.internal.h;->a:236	API Call: java.security.MessageDigest.getInstance
Source: com.google.android.play.core.internal.h;->a:242	API Call: java.security.MessageDigest.update
Source: com.google.android.play.core.internal.h;->a:245	API Call: java.security.MessageDigest.digest
Source: com.google.android.play.core.internal.h;->a:268	API Call: java.security.MessageDigest.getInstance
Source: com.google.android.play.core.internal.h;->a:269	API Call: java.security.MessageDigest.digest
Source: okio.Buffer;->digest:5	API Call: java.security.MessageDigest.getInstance
Source: okio.Buffer;->digest:8	API Call: java.security.MessageDigest.update
Source: okio.Buffer;->digest:12	API Call: java.security.MessageDigest.update
Source: okio.Buffer;->digest:15	API Call: java.security.MessageDigest.digest
Source: okio.ByteString;->digest$okio:76	API Call: java.security.MessageDigest.getInstance
Source: okio.ByteString;->digest$okio:78	API Call: java.security.MessageDigest.digest
Source: okio.HashingSink;-><init>:7	API Call: java.security.MessageDigest.getInstance
Source: okio.HashingSink;->hash:36	API Call: java.security.MessageDigest.digest
Source: okio.HashingSink;->write:52	API Call: java.security.MessageDigest.update
Source: okio.HashingSource;-><init>:7	API Call: java.security.MessageDigest.getInstance
Source: okio.HashingSource;->hash:36	API Call: java.security.MessageDigest.digest
Source: okio.HashingSource;->read:55	API Call: java.security.MessageDigest.update
Source: okio.SegmentedByteString;->digest$okio:24	API Call: java.security.MessageDigest.getInstance
Source: okio.SegmentedByteString;->digest$okio:29	API Call: java.security.MessageDigest.update
Source: okio.SegmentedByteString;->digest$okio:30	API Call: java.security.MessageDigest.digest
Source: de.rki.coronawarnapp.util.security.HashHelper;->hash256:6	API Call: java.security.MessageDigest.getInstance
Source: de.rki.coronawarnapp.util.security.HashHelper;->hash256:11	API Call: java.security.MessageDigest.digest
Source: com.google.android.play.core.splitcompat.q;->a:3	API Call: java.security.MessageDigest.getInstance
Source: com.google.android.play.core.splitcompat.q;->a:4	API Call: java.security.MessageDigest.update
Source: com.google.android.play.core.splitcompat.q;->a:5	API Call: java.security.MessageDigest.digest
Source: com.google.crypto.tink.subtle.AesCmac;->generateSubKeys:12	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesCmac;->generateSubKeys:13	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesCmac;->computeMac:21	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesCtrHmacStreaming$AesCtrHmacStreamDecrypter;->decryptSegment:35	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesCtrHmacStreaming$AesCtrHmacStreamDecrypter;->decryptSegment:37	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesCmac;->computeMac:31	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesCmac;->computeMac:33	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesCtrHmacStreaming$AesCtrHmacStreamEncrypter;->encryptSegment:27	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesCtrHmacStreaming$AesCtrHmacStreamEncrypter;->encryptSegment:31	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesCtrHmacStreaming$AesCtrHmacStreamEncrypter;->encryptSegment:54	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesCtrHmacStreaming$AesCtrHmacStreamEncrypter;->encryptSegment:56	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesCtrJceCipher;->doCtr:16	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesCtrJceCipher;->doCtr:18	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesCtrJceCipher;->doCtr:19	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesGcmHkdfStreaming$AesGcmHkdfStreamDecrypter;->decryptSegment:6	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesGcmHkdfStreaming$AesGcmHkdfStreamDecrypter;->decryptSegment:8	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesEaxJce;-><init>:12	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesEaxJce;-><init>:13	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesEaxJce;->omac:18	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesEaxJce;->omac:19	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesEaxJce;->omac:20	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesEaxJce;->omac:24	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesEaxJce;->decrypt:32	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesEaxJce;->decrypt:40	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesEaxJce;->decrypt:41	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesGcmHkdfStreaming$AesGcmHkdfStreamEncrypter;->encryptSegment:21	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesGcmHkdfStreaming$AesGcmHkdfStreamEncrypter;->encryptSegment:26	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesGcmHkdfStreaming$AesGcmHkdfStreamEncrypter;->encryptSegment:28	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesGcmHkdfStreaming$AesGcmHkdfStreamEncrypter;->encryptSegment:33	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesGcmHkdfStreaming$AesGcmHkdfStreamEncrypter;->encryptSegment:35	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesEaxJce;->encrypt:51	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesEaxJce;->encrypt:58	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesEaxJce;->encrypt:59	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesGcmJce;->decrypt:18	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesGcmJce;->decrypt:24	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesGcmJce;->encrypt:33	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesGcmJce;->encrypt:39	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesSiv;->decryptDeterministically:43	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesSiv;->decryptDeterministically:45	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.AesSiv;->encryptDeterministically:62	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.AesSiv;->encryptDeterministically:63	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.Ed25519;->getHashedScalar:147	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.Ed25519;->getHashedScalar:148	API Call: java.security.MessageDigest.digest
Source: com.google.crypto.tink.subtle.Ed25519;->sign:311	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.Ed25519;->sign:312	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.Ed25519;->sign:313	API Call: java.security.MessageDigest.digest
Source: com.google.crypto.tink.subtle.Ed25519;->sign:319	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.Ed25519;->sign:320	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.Ed25519;->sign:321	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.Ed25519;->sign:322	API Call: java.security.MessageDigest.digest
Source: com.google.crypto.tink.subtle.Ed25519;->verify:392	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.Ed25519;->verify:393	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.Ed25519;->verify:394	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.Ed25519;->verify:395	API Call: java.security.MessageDigest.digest
Source: com.google.crypto.tink.subtle.EngineWrapper$TCipher;->getInstance:3	API Call: javax.crypto.Cipher.getInstance
Source: com.google.crypto.tink.subtle.EngineWrapper$TCipher;->getInstance:4	API Call: javax.crypto.Cipher.getInstance
Source: com.google.crypto.tink.subtle.EngineWrapper$TMessageDigest;->getInstance:3	API Call: java.security.MessageDigest.getInstance
Source: com.google.crypto.tink.subtle.EngineWrapper$TMessageDigest;->getInstance:4	API Call: java.security.MessageDigest.getInstance
Source: com.google.crypto.tink.subtle.Kwp;->computeW:13	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.Kwp;->computeW:16	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.Kwp;->invertW:26	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.Kwp;->invertW:29	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.RsaSsaPkcs1VerifyJce;->emsaPkcs1:11	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.RsaSsaPkcs1VerifyJce;->emsaPkcs1:12	API Call: java.security.MessageDigest.digest
Source: com.google.crypto.tink.subtle.RsaSsaPssSignJce;->emsaPssEncode:19	API Call: java.security.MessageDigest.digest
Source: com.google.crypto.tink.subtle.RsaSsaPssSignJce;->emsaPssEncode:24	API Call: java.security.MessageDigest.digest
Source: com.google.crypto.tink.subtle.RsaSsaPssSignJce;->rsasp1:36	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.RsaSsaPssSignJce;->rsasp1:37	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.RsaSsaPssSignJce;->rsasp1:41	API Call: javax.crypto.Cipher.init
Source: com.google.crypto.tink.subtle.RsaSsaPssSignJce;->rsasp1:42	API Call: javax.crypto.Cipher.doFinal
Source: com.google.crypto.tink.subtle.RsaSsaPssVerifyJce;->emsaPssVerify:12	API Call: java.security.MessageDigest.digest
Source: com.google.crypto.tink.subtle.RsaSsaPssVerifyJce;->emsaPssVerify:24	API Call: java.security.MessageDigest.digest
Source: com.google.crypto.tink.subtle.SubtleUtil;->mgf1:16	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.SubtleUtil;->mgf1:19	API Call: java.security.MessageDigest.update
Source: com.google.crypto.tink.subtle.SubtleUtil;->mgf1:20	API Call: java.security.MessageDigest.digest
Source: com.google.android.gms.common.util.AndroidUtilsLight;->getPackageCertificateHashBytes:12	API Call: java.security.MessageDigest.digest
Source: com.google.android.gms.common.util.AndroidUtilsLight;->zza:13	API Call: java.security.MessageDigest.getInstance
Source: de.rki.coronawarnapp.util.TanHelper;->isChecksumValid:25	API Call: java.security.MessageDigest.getInstance
Source: de.rki.coronawarnapp.util.TanHelper;->isChecksumValid:32	API Call: java.security.MessageDigest.digest

Malware Analysis System Evasion:

Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:12	Field Access: android.os.Build.BOARD
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:17	Field Access: android.os.Build.BRAND
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:22	Field Access: android.os.Build.CPU_ABI
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:27	Field Access: android.os.Build.DEVICE
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:32	Field Access: android.os.Build.DISPLAY
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:37	Field Access: android.os.Build.FINGERPRINT
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:42	Field Access: android.os.Build.HOST
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:47	Field Access: android.os.Build.ID
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:52	Field Access: android.os.Build.MANUFACTURER
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:57	Field Access: android.os.Build.MODEL
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:62	Field Access: android.os.Build.PRODUCT
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:67	Field Access: android.os.Build.TAGS
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:76	Field Access: android.os.Build.TYPE
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:81	Field Access: android.os.Build.USER
Source: com.google.zxing.client.android.camera.CameraConfigurationUtils;->collectStats:96	Field Access: android.os.Build$VERSION.RELEASE
Source: com.journeyapps.barcodescanner.camera.CameraManager;->setDesiredParameters:74	Field Access: android.os.Build.DEVICE
Source: com.google.android.play.core.internal.bt;->a:11	Field Access: android.os.Build.TAGS
Source: com.google.android.play.core.internal.bt;->a:14	Field Access: android.os.Build.TAGS
Source: com.google.android.material.internal.ManufacturerUtils;->isSamsungDevice:2	Field Access: android.os.Build.MANUFACTURER
Source: com.google.android.material.textfield.TextInputEditText;->onAttachedToWindow:16	Field Access: android.os.Build.MANUFACTURER
Source: com.google.android.gms.common.util.DeviceProperties;->isUserBuild:43	Field Access: android.os.Build.TYPE
Source: com.google.android.gms.common.util.PlatformVersion;->isAtLeastR:15	Field Access: android.os.Build.BRAND
Source: com.google.android.gms.common.util.PlatformVersion;->isAtLeastR:17	Field Access: android.os.Build.ID
Source: com.google.android.gms.common.util.PlatformVersion;->isAtLeastR:20	Field Access: android.os.Build.ID
Source: androidx.core.view.DisplayCompat;->isSonyBravia4kTv:32	Field Access: android.os.Build.MANUFACTURER
Source: androidx.core.view.DisplayCompat;->isSonyBravia4kTv:35	Field Access: android.os.Build.MODEL

Source: Lcom/airbnb/lottie/parser/PolystarShapeParser;-><clinit>()V	Method string: "os"
Source: Lkotlin/reflect/KTypeProjection$Companion;->invariant(Lkotlin/reflect/KType;)Lkotlin/reflect/KTypeProjection;	Method string: "type"
Source: Lorg/joda/time/PeriodType;->time()Lorg/joda/time/PeriodType;	Method string: "time"
Source: Lde/rki/coronawarnapp/exception/reporting/ExceptionReporterKt;->reportGeneric(Ljava/lang/String;)V	Method string: "category"

Language, Device and Operating System Detection:

Source: com.google.android.play.core.internal.bt;->a:16

API Call: java.lang.String.contains("test-keys")

Stealing of Sensitive Information:

Source: com.journeyapps.barcodescanner.camera.CameraManager;->open:145	API Call: android.hardware.Camera.getCameraInfo
Source: com.google.zxing.client.android.camera.open.OpenCameraInterface;->getCameraId:3	API Call: android.hardware.Camera.getNumberOfCameras
Source: com.google.zxing.client.android.camera.open.OpenCameraInterface;->getCameraId:8	API Call: android.hardware.Camera.getCameraInfo
Source: com.google.zxing.client.android.camera.open.OpenCameraInterface;->open:10	API Call: android.hardware.Camera.open

Source: com.google.android.gms.common.internal.ClientSettings;->getAccountName:20	API Call: android.accounts.Account.name
Source: com.google.android.gms.signin.internal.SignInClientImpl;->zaa:82	API Call: android.accounts.Account.name
Source: com.google.android.gms.auth.api.signin.GoogleSignInAccount;->createDefault:9	API Call: android.accounts.Account.name
Source: com.google.android.gms.auth.api.signin.GoogleSignInAccount;->createDefault:11	API Call: android.accounts.Account.name
Source: com.google.android.gms.auth.api.signin.GoogleSignInOptions;->zab:81	API Call: android.accounts.Account.name

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	Access Stored Application Data1	System Network Connections Discovery1	Remote Services	Location Tracking1	Exfiltration Over Other Network Medium	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Delete Device Data1
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Location Tracking1	Remote Desktop Protocol	Access Stored Application Data1	Exfiltration Over Bluetooth	Non-Standard Port1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	System Information Discovery1	SMB/Windows Admin Shares	Network Information Discovery1	Automated Exfiltration	Non-Application Layer Protocol1	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	Process Discovery1	Distributed Component Object Model	Input Capture	Scheduled Transfer	Application Layer Protocol2	SIM Card Swap		Carrier Billing Fraud

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report be.sciensano.coronalert_1.11.2.apk

Overview

General Information

Detection

Signatures

Classification

Yara Overview

Signature Overview

Location Tracking:

Compliance:

Spreading:

Networking:

E-Banking Fraud:

Operating System Destruction:

Change of System Appearance:

System Summary:

Data Obfuscation:

Persistence and Installation Behavior:

Boot Survival:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Language, Device and Operating System Detection:

Stealing of Sensitive Information:

Mitre Att&ck Matrix

Screenshots

Thumbnails