[Bug] Detected by some Egypt bank apps

[hexman1999]

Steps to reproduce/复现步骤

It is detected in

KFH Egypt wallet
Instapay Egypt
NBE Phone Cash Egypt

Rezygisk works well for those

Expected behaviour/预期行为

Hidden

Actual behaviour/实际行为

Detected

Root implementation/Root 方案

ksunext 3.1

System Module List/系统模块列表

Neozygisk 
PIF inject
TEE simulator 
HMA OSS zygisk
Lsposed

NeoZygisk version/NeoZygisk 版本

2.3

Android version/Android 版本

16

Version requirement/版本要求

• I am using the latest debug build from GitHub Actions./我正在使用 GitHub Actions 中最新的调试版本。

Logs/日志

Can be provided later, as I don't have enough time for now to reinstall and test again

[JingMatrix]

Please upload APK and logs for the target apps.

[hexman1999]

Please upload APK and logs for the target apps.

-

Github refuse to upload apks

However it can be downloaded from google play or aurora store with following package names

version 2.14.42
com.AUB.Wallet
versionCode 21442

version 2.14.56
com.emeint.android.mwallet
versionCode 21456

[JingMatrix]

Okay, I will test this app later https://play.google.com/store/apps/details?id=com.emeint.android.mwallet

[Ahm3dRN]

Same issue here. has been any updates?

[hexman1999]

Same issue here. has been any updates?

For now I use ReZygisk and it's fine, till this problem solved

[Ahm3dRN]

Same issue here. has been any updates?

For now I use ReZygisk and it's fine, till this problem solved

I'm also using ReZygisk and the app crashes once i start it. Can you share your full setup please?

logcat for the crash

04-26 15:50:17.538 14594 14594 E nbanks.instapa: Not starting debugger since process cannot load the jdwp agent.
04-26 15:50:17.542 14594 14594 D ProcessState: Binder ioctl to enable oneway spam detection failed: Invalid argument
04-26 15:50:17.548 14594 14594 I MessageMonitor: Load libmiui_runtime
--------- beginning of system
04-26 15:50:17.585 14594 14594 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:17.586 14594 14594 W MQSEventManagerDelegate: registerApplicationScoutThread getMQSService null
04-26 15:50:17.586 14594 14594 W ActivityThread: registerApplicationScoutThread result:false
04-26 15:50:17.589 14594 14611 D AppScoutStateMachine: 14594-ScoutStateMachinecreated
04-26 15:50:17.590 14594 14594 D CompatibilityChangeReporter: Compat change id reported: 171979766; UID 10223; state: ENABLED
04-26 15:50:18.044 14594 14594 W nbanks.instapa: Entry not found
04-26 15:50:18.044 14594 14594 W nbanks.instapa: Entry not found
04-26 15:50:18.050 14594 14594 W nbanks.instapa: JIT profile information will not be recorded: profile file does not exist.
04-26 15:50:18.050 14594 14594 W nbanks.instapa: JIT profile information will not be recorded: profile file does not exist.
04-26 15:50:18.050 14594 14594 W nbanks.instapa: JIT profile information will not be recorded: profile file does not exist.
04-26 15:50:18.060 14594 14594 V GraphicsEnvironment: ANGLE Developer option for 'com.egyptianbanks.instapay' set to: 'default'
04-26 15:50:18.060 14594 14594 V GraphicsEnvironment: Neither updatable production driver nor prerelease driver is supported.
04-26 15:50:18.065 14594 14594 I ForceDarkHelperStubImpl: initialize for com.egyptianbanks.instapay , ForceDarkOrigin
04-26 15:50:18.069 14594 14594 D OpenGLRenderer: JNI_OnLoad success
04-26 15:50:18.069 14594 14594 I MiuiForceDarkConfig: setConfig density:2.750000, mainRule:0, secondaryRule:0, tertiaryRule:0
04-26 15:50:18.071 14594 14594 D NetworkSecurityConfig: No Network Security Config specified, using platform default
04-26 15:50:18.071 14594 14594 D NetworkSecurityConfig: No Network Security Config specified, using platform default
04-26 15:50:18.922 14594 14604 I nbanks.instapa: JIT allocated 76KB for compiled code of void o.BacktraceFrameCompanion.<clinit>()
04-26 15:50:18.923 14594 14604 I nbanks.instapa: Compiler allocated 13MB to compile void o.BacktraceFrameCompanion.<clinit>()
04-26 15:50:18.964 14594 14594 W nbanks.instapay: type=1400 audit(0.0:738): avc: denied { read } for name="filesystems" dev="proc" ino=4026532298 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:proc_filesystems:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:18.968 14594 14594 W nbanks.instapay: type=1400 audit(0.0:739): avc: denied { read } for name="filesystems" dev="proc" ino=4026532298 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:proc_filesystems:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:18.968 14594 14594 W nbanks.instapay: type=1400 audit(0.0:740): avc: denied { read } for name="modules" dev="proc" ino=4026532293 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:proc_modules:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.096 14594 14594 W nbanks.instapay: type=1400 audit(0.0:742): avc: denied { getattr } for path="/sys/kernel/tracing/trace_marker" dev="tracefs" ino=3082 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:debugfs_trace_marker:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.340 14594 14594 W nbanks.instapay: type=1400 audit(0.0:744): avc: denied { read } for name="policy" dev="selinuxfs" ino=20 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:selinuxfs:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.413 14594 14594 D DexguardCall: Called with debugInfo=8589934872
04-26 15:50:19.417 14594 14594 E dexguardCall: Exception occurred: Default FirebaseApp is not initialized in this process com.egyptianbanks.instapay. Make sure to call FirebaseApp.initializeApp(Context) first.
04-26 15:50:19.417 14594 14594 E dexguardCall: java.lang.IllegalStateException: Default FirebaseApp is not initialized in this process com.egyptianbanks.instapay. Make sure to call FirebaseApp.initializeApp(Context) first.
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.getInstance(:179)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.crashlytics.FirebaseCrashlytics.getInstance(:191)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.olive.insta_pay.activity.BaseActivity$Companion.logToCrashlytics(:341)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at org.bouncycastle.jce.provider.BrokenPBE$Util.$$a(Unknown Source:1279)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.crashlytics.CrashlyticsRegistrar.getComponents(:285)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.tracing.ComponentMonitor.processRegistrar(:28)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime.discoverComponents(:118)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime.<init>(:100)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime.<init>(:46)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime$Builder.build(:407)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.<init>(:439)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.initializeApp(:296)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.initializeApp(:264)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.initializeApp(:249)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.provider.FirebaseInitProvider.onCreate(:2276)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.content.ContentProvider.attachInfo(ContentProvider.java:2421)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.content.ContentProvider.attachInfo(ContentProvider.java:2386)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.provider.FirebaseInitProvider.attachInfo(:61)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.installProvider(ActivityThread.java:7839)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.installContentProviders(ActivityThread.java:7350)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7078)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.access$1700(ActivityThread.java:275)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2168)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.os.Handler.dispatchMessage(Handler.java:106)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.os.Looper.loopOnce(Looper.java:210)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.os.Looper.loop(Looper.java:299)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.main(ActivityThread.java:8280)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:576)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1073)
04-26 15:50:19.418 14594 14594 D AndroidRuntime: Shutting down VM
--------- beginning of crash
04-26 15:50:19.419 14594 14594 E AndroidRuntime: FATAL EXCEPTION: main
04-26 15:50:19.419 14594 14594 E AndroidRuntime: Process: com.egyptianbanks.instapay, PID: 14594
04-26 15:50:19.419 14594 14594 E AndroidRuntime: java.lang.RuntimeException: Unable to get provider com.google.firebase.provider.FirebaseInitProvider: java.lang.NullPointerException
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.installProvider(ActivityThread.java:7844)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.installContentProviders(ActivityThread.java:7350)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7078)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.access$1700(ActivityThread.java:275)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2168)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.os.Handler.dispatchMessage(Handler.java:106)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.os.Looper.loopOnce(Looper.java:210)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.os.Looper.loop(Looper.java:299)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.main(ActivityThread.java:8280)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:576)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1073)
04-26 15:50:19.419 14594 14594 E AndroidRuntime: Caused by: java.lang.NullPointerException
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.crashlytics.CrashlyticsRegistrar.getComponents(:298)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.tracing.ComponentMonitor.processRegistrar(:28)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime.discoverComponents(:118)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime.<init>(:100)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime.<init>(:46)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime$Builder.build(:407)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.<init>(:439)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.initializeApp(:296)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.initializeApp(:264)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.initializeApp(:249)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.provider.FirebaseInitProvider.onCreate(:2276)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.content.ContentProvider.attachInfo(ContentProvider.java:2421)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.content.ContentProvider.attachInfo(ContentProvider.java:2386)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.provider.FirebaseInitProvider.attachInfo(:61)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.installProvider(ActivityThread.java:7839)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        ... 11 more
04-26 15:50:19.420 14594 14594 W nbanks.instapay: type=1400 audit(0.0:745): avc: denied { search } for name="mqsas" dev="mmcblk0p46" ino=966657 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:mqsas_data_file:s0 tclass=dir permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.422 14594 14594 W OOMEventManagerFK: Failed to mkdir /data/mqsas/hprof/
04-26 15:50:19.425 14594 14594 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:20.090 14594 14612 W MIUIScout App: Enter APP_SCOUT_WARNING State
04-26 15:50:20.090 14594 14612 W MIUIScout App:  (Current message: duration=2502ms seq=2 late=22ms h=android.app.ActivityThread$H w=110)
04-26 15:50:20.091 14594 14612 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:20.091 14594 14612 W MQSEventManagerDelegate: registerApplicationScoutThread getMQSService null
04-26 15:50:20.091 14594 14793 W MIUIScout App: Event:APP_SCOUT_WARNING Thread:main backtrace:
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at android.os.BinderProxy.transactNative(Native Method)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at android.os.BinderProxy.transact(BinderProxy.java:629)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at android.app.IActivityManager$Stub$Proxy.handleApplicationCrash(IActivityManager.java:5572)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at com.android.internal.os.RuntimeInit$KillApplicationHandler.uncaughtException(RuntimeInit.java:184)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at java.lang.ThreadGroup.uncaughtException(ThreadGroup.java:1073)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at java.lang.ThreadGroup.uncaughtException(ThreadGroup.java:1068)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at java.lang.Thread.dispatchUncaughtException(Thread.java:2200)
04-26 15:50:20.091 14594 14612 W ActivityThread: registerApplicationScoutThread result:false
04-26 15:50:20.092 14594 14612 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:20.092 14594 14612 W MQSEventManagerDelegate: reportAppScoutEvent getMQSService null

[hexman1999]

Same issue here. has been any updates?

For now I use ReZygisk and it's fine, till this problem solved

I'm also using ReZygisk and the app crashes once i start it. Can you share your full setup please?

logcat for the crash

04-26 15:50:17.538 14594 14594 E nbanks.instapa: Not starting debugger since process cannot load the jdwp agent.
04-26 15:50:17.542 14594 14594 D ProcessState: Binder ioctl to enable oneway spam detection failed: Invalid argument
04-26 15:50:17.548 14594 14594 I MessageMonitor: Load libmiui_runtime
--------- beginning of system
04-26 15:50:17.585 14594 14594 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:17.586 14594 14594 W MQSEventManagerDelegate: registerApplicationScoutThread getMQSService null
04-26 15:50:17.586 14594 14594 W ActivityThread: registerApplicationScoutThread result:false
04-26 15:50:17.589 14594 14611 D AppScoutStateMachine: 14594-ScoutStateMachinecreated
04-26 15:50:17.590 14594 14594 D CompatibilityChangeReporter: Compat change id reported: 171979766; UID 10223; state: ENABLED
04-26 15:50:18.044 14594 14594 W nbanks.instapa: Entry not found
04-26 15:50:18.044 14594 14594 W nbanks.instapa: Entry not found
04-26 15:50:18.050 14594 14594 W nbanks.instapa: JIT profile information will not be recorded: profile file does not exist.
04-26 15:50:18.050 14594 14594 W nbanks.instapa: JIT profile information will not be recorded: profile file does not exist.
04-26 15:50:18.050 14594 14594 W nbanks.instapa: JIT profile information will not be recorded: profile file does not exist.
04-26 15:50:18.060 14594 14594 V GraphicsEnvironment: ANGLE Developer option for 'com.egyptianbanks.instapay' set to: 'default'
04-26 15:50:18.060 14594 14594 V GraphicsEnvironment: Neither updatable production driver nor prerelease driver is supported.
04-26 15:50:18.065 14594 14594 I ForceDarkHelperStubImpl: initialize for com.egyptianbanks.instapay , ForceDarkOrigin
04-26 15:50:18.069 14594 14594 D OpenGLRenderer: JNI_OnLoad success
04-26 15:50:18.069 14594 14594 I MiuiForceDarkConfig: setConfig density:2.750000, mainRule:0, secondaryRule:0, tertiaryRule:0
04-26 15:50:18.071 14594 14594 D NetworkSecurityConfig: No Network Security Config specified, using platform default
04-26 15:50:18.071 14594 14594 D NetworkSecurityConfig: No Network Security Config specified, using platform default
04-26 15:50:18.922 14594 14604 I nbanks.instapa: JIT allocated 76KB for compiled code of void o.BacktraceFrameCompanion.<clinit>()
04-26 15:50:18.923 14594 14604 I nbanks.instapa: Compiler allocated 13MB to compile void o.BacktraceFrameCompanion.<clinit>()
04-26 15:50:18.964 14594 14594 W nbanks.instapay: type=1400 audit(0.0:738): avc: denied { read } for name="filesystems" dev="proc" ino=4026532298 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:proc_filesystems:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:18.968 14594 14594 W nbanks.instapay: type=1400 audit(0.0:739): avc: denied { read } for name="filesystems" dev="proc" ino=4026532298 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:proc_filesystems:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:18.968 14594 14594 W nbanks.instapay: type=1400 audit(0.0:740): avc: denied { read } for name="modules" dev="proc" ino=4026532293 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:proc_modules:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.096 14594 14594 W nbanks.instapay: type=1400 audit(0.0:742): avc: denied { getattr } for path="/sys/kernel/tracing/trace_marker" dev="tracefs" ino=3082 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:debugfs_trace_marker:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.340 14594 14594 W nbanks.instapay: type=1400 audit(0.0:744): avc: denied { read } for name="policy" dev="selinuxfs" ino=20 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:selinuxfs:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.413 14594 14594 D DexguardCall: Called with debugInfo=8589934872
04-26 15:50:19.417 14594 14594 E dexguardCall: Exception occurred: Default FirebaseApp is not initialized in this process com.egyptianbanks.instapay. Make sure to call FirebaseApp.initializeApp(Context) first.
04-26 15:50:19.417 14594 14594 E dexguardCall: java.lang.IllegalStateException: Default FirebaseApp is not initialized in this process com.egyptianbanks.instapay. Make sure to call FirebaseApp.initializeApp(Context) first.
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.getInstance(:179)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.crashlytics.FirebaseCrashlytics.getInstance(:191)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.olive.insta_pay.activity.BaseActivity$Companion.logToCrashlytics(:341)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at org.bouncycastle.jce.provider.BrokenPBE$Util.$$a(Unknown Source:1279)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.crashlytics.CrashlyticsRegistrar.getComponents(:285)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.tracing.ComponentMonitor.processRegistrar(:28)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime.discoverComponents(:118)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime.<init>(:100)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime.<init>(:46)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime$Builder.build(:407)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.<init>(:439)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.initializeApp(:296)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.initializeApp(:264)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.initializeApp(:249)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.provider.FirebaseInitProvider.onCreate(:2276)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.content.ContentProvider.attachInfo(ContentProvider.java:2421)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.content.ContentProvider.attachInfo(ContentProvider.java:2386)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.provider.FirebaseInitProvider.attachInfo(:61)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.installProvider(ActivityThread.java:7839)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.installContentProviders(ActivityThread.java:7350)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7078)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.access$1700(ActivityThread.java:275)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2168)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.os.Handler.dispatchMessage(Handler.java:106)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.os.Looper.loopOnce(Looper.java:210)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.os.Looper.loop(Looper.java:299)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.main(ActivityThread.java:8280)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:576)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1073)
04-26 15:50:19.418 14594 14594 D AndroidRuntime: Shutting down VM
--------- beginning of crash
04-26 15:50:19.419 14594 14594 E AndroidRuntime: FATAL EXCEPTION: main
04-26 15:50:19.419 14594 14594 E AndroidRuntime: Process: com.egyptianbanks.instapay, PID: 14594
04-26 15:50:19.419 14594 14594 E AndroidRuntime: java.lang.RuntimeException: Unable to get provider com.google.firebase.provider.FirebaseInitProvider: java.lang.NullPointerException
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.installProvider(ActivityThread.java:7844)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.installContentProviders(ActivityThread.java:7350)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7078)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.access$1700(ActivityThread.java:275)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2168)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.os.Handler.dispatchMessage(Handler.java:106)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.os.Looper.loopOnce(Looper.java:210)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.os.Looper.loop(Looper.java:299)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.main(ActivityThread.java:8280)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:576)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1073)
04-26 15:50:19.419 14594 14594 E AndroidRuntime: Caused by: java.lang.NullPointerException
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.crashlytics.CrashlyticsRegistrar.getComponents(:298)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.tracing.ComponentMonitor.processRegistrar(:28)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime.discoverComponents(:118)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime.<init>(:100)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime.<init>(:46)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime$Builder.build(:407)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.<init>(:439)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.initializeApp(:296)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.initializeApp(:264)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.initializeApp(:249)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.provider.FirebaseInitProvider.onCreate(:2276)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.content.ContentProvider.attachInfo(ContentProvider.java:2421)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.content.ContentProvider.attachInfo(ContentProvider.java:2386)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.provider.FirebaseInitProvider.attachInfo(:61)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.installProvider(ActivityThread.java:7839)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        ... 11 more
04-26 15:50:19.420 14594 14594 W nbanks.instapay: type=1400 audit(0.0:745): avc: denied { search } for name="mqsas" dev="mmcblk0p46" ino=966657 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:mqsas_data_file:s0 tclass=dir permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.422 14594 14594 W OOMEventManagerFK: Failed to mkdir /data/mqsas/hprof/
04-26 15:50:19.425 14594 14594 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:20.090 14594 14612 W MIUIScout App: Enter APP_SCOUT_WARNING State
04-26 15:50:20.090 14594 14612 W MIUIScout App:  (Current message: duration=2502ms seq=2 late=22ms h=android.app.ActivityThread$H w=110)
04-26 15:50:20.091 14594 14612 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:20.091 14594 14612 W MQSEventManagerDelegate: registerApplicationScoutThread getMQSService null
04-26 15:50:20.091 14594 14793 W MIUIScout App: Event:APP_SCOUT_WARNING Thread:main backtrace:
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at android.os.BinderProxy.transactNative(Native Method)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at android.os.BinderProxy.transact(BinderProxy.java:629)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at android.app.IActivityManager$Stub$Proxy.handleApplicationCrash(IActivityManager.java:5572)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at com.android.internal.os.RuntimeInit$KillApplicationHandler.uncaughtException(RuntimeInit.java:184)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at java.lang.ThreadGroup.uncaughtException(ThreadGroup.java:1073)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at java.lang.ThreadGroup.uncaughtException(ThreadGroup.java:1068)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at java.lang.Thread.dispatchUncaughtException(Thread.java:2200)
04-26 15:50:20.091 14594 14612 W ActivityThread: registerApplicationScoutThread result:false
04-26 15:50:20.092 14594 14612 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:20.092 14594 14612 W MQSEventManagerDelegate: reportAppScoutEvent getMQSService null

I have kernelsu next with ReZygisk, lsposed, hma-oss, tee simulator, tricky addon, that's enough to hide

Note: if using magisk you should ensure denylist not enforced but add instapay to denylist,

hma-oss is mandatory to hide kernelsu app, or even magisk, or use spoofed version if ksun or hide app from magisk settings if using magisk

If not working tell details about you root and modules to help

[Ahm3dRN]

Same issue here. has been any updates?

For now I use ReZygisk and it's fine, till this problem solved

I'm also using ReZygisk and the app crashes once i start it. Can you share your full setup please?

logcat for the crash

04-26 15:50:17.538 14594 14594 E nbanks.instapa: Not starting debugger since process cannot load the jdwp agent.
04-26 15:50:17.542 14594 14594 D ProcessState: Binder ioctl to enable oneway spam detection failed: Invalid argument
04-26 15:50:17.548 14594 14594 I MessageMonitor: Load libmiui_runtime
--------- beginning of system
04-26 15:50:17.585 14594 14594 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:17.586 14594 14594 W MQSEventManagerDelegate: registerApplicationScoutThread getMQSService null
04-26 15:50:17.586 14594 14594 W ActivityThread: registerApplicationScoutThread result:false
04-26 15:50:17.589 14594 14611 D AppScoutStateMachine: 14594-ScoutStateMachinecreated
04-26 15:50:17.590 14594 14594 D CompatibilityChangeReporter: Compat change id reported: 171979766; UID 10223; state: ENABLED
04-26 15:50:18.044 14594 14594 W nbanks.instapa: Entry not found
04-26 15:50:18.044 14594 14594 W nbanks.instapa: Entry not found
04-26 15:50:18.050 14594 14594 W nbanks.instapa: JIT profile information will not be recorded: profile file does not exist.
04-26 15:50:18.050 14594 14594 W nbanks.instapa: JIT profile information will not be recorded: profile file does not exist.
04-26 15:50:18.050 14594 14594 W nbanks.instapa: JIT profile information will not be recorded: profile file does not exist.
04-26 15:50:18.060 14594 14594 V GraphicsEnvironment: ANGLE Developer option for 'com.egyptianbanks.instapay' set to: 'default'
04-26 15:50:18.060 14594 14594 V GraphicsEnvironment: Neither updatable production driver nor prerelease driver is supported.
04-26 15:50:18.065 14594 14594 I ForceDarkHelperStubImpl: initialize for com.egyptianbanks.instapay , ForceDarkOrigin
04-26 15:50:18.069 14594 14594 D OpenGLRenderer: JNI_OnLoad success
04-26 15:50:18.069 14594 14594 I MiuiForceDarkConfig: setConfig density:2.750000, mainRule:0, secondaryRule:0, tertiaryRule:0
04-26 15:50:18.071 14594 14594 D NetworkSecurityConfig: No Network Security Config specified, using platform default
04-26 15:50:18.071 14594 14594 D NetworkSecurityConfig: No Network Security Config specified, using platform default
04-26 15:50:18.922 14594 14604 I nbanks.instapa: JIT allocated 76KB for compiled code of void o.BacktraceFrameCompanion.<clinit>()
04-26 15:50:18.923 14594 14604 I nbanks.instapa: Compiler allocated 13MB to compile void o.BacktraceFrameCompanion.<clinit>()
04-26 15:50:18.964 14594 14594 W nbanks.instapay: type=1400 audit(0.0:738): avc: denied { read } for name="filesystems" dev="proc" ino=4026532298 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:proc_filesystems:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:18.968 14594 14594 W nbanks.instapay: type=1400 audit(0.0:739): avc: denied { read } for name="filesystems" dev="proc" ino=4026532298 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:proc_filesystems:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:18.968 14594 14594 W nbanks.instapay: type=1400 audit(0.0:740): avc: denied { read } for name="modules" dev="proc" ino=4026532293 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:proc_modules:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.096 14594 14594 W nbanks.instapay: type=1400 audit(0.0:742): avc: denied { getattr } for path="/sys/kernel/tracing/trace_marker" dev="tracefs" ino=3082 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:debugfs_trace_marker:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.340 14594 14594 W nbanks.instapay: type=1400 audit(0.0:744): avc: denied { read } for name="policy" dev="selinuxfs" ino=20 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:selinuxfs:s0 tclass=file permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.413 14594 14594 D DexguardCall: Called with debugInfo=8589934872
04-26 15:50:19.417 14594 14594 E dexguardCall: Exception occurred: Default FirebaseApp is not initialized in this process com.egyptianbanks.instapay. Make sure to call FirebaseApp.initializeApp(Context) first.
04-26 15:50:19.417 14594 14594 E dexguardCall: java.lang.IllegalStateException: Default FirebaseApp is not initialized in this process com.egyptianbanks.instapay. Make sure to call FirebaseApp.initializeApp(Context) first.
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.getInstance(:179)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.crashlytics.FirebaseCrashlytics.getInstance(:191)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.olive.insta_pay.activity.BaseActivity$Companion.logToCrashlytics(:341)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at org.bouncycastle.jce.provider.BrokenPBE$Util.$$a(Unknown Source:1279)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.crashlytics.CrashlyticsRegistrar.getComponents(:285)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.tracing.ComponentMonitor.processRegistrar(:28)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime.discoverComponents(:118)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime.<init>(:100)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime.<init>(:46)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.components.ComponentRuntime$Builder.build(:407)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.<init>(:439)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.initializeApp(:296)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.initializeApp(:264)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.FirebaseApp.initializeApp(:249)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.provider.FirebaseInitProvider.onCreate(:2276)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.content.ContentProvider.attachInfo(ContentProvider.java:2421)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.content.ContentProvider.attachInfo(ContentProvider.java:2386)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.google.firebase.provider.FirebaseInitProvider.attachInfo(:61)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.installProvider(ActivityThread.java:7839)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.installContentProviders(ActivityThread.java:7350)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7078)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.access$1700(ActivityThread.java:275)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2168)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.os.Handler.dispatchMessage(Handler.java:106)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.os.Looper.loopOnce(Looper.java:210)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.os.Looper.loop(Looper.java:299)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at android.app.ActivityThread.main(ActivityThread.java:8280)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:576)
04-26 15:50:19.417 14594 14594 E dexguardCall:  at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1073)
04-26 15:50:19.418 14594 14594 D AndroidRuntime: Shutting down VM
--------- beginning of crash
04-26 15:50:19.419 14594 14594 E AndroidRuntime: FATAL EXCEPTION: main
04-26 15:50:19.419 14594 14594 E AndroidRuntime: Process: com.egyptianbanks.instapay, PID: 14594
04-26 15:50:19.419 14594 14594 E AndroidRuntime: java.lang.RuntimeException: Unable to get provider com.google.firebase.provider.FirebaseInitProvider: java.lang.NullPointerException
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.installProvider(ActivityThread.java:7844)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.installContentProviders(ActivityThread.java:7350)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.handleBindApplication(ActivityThread.java:7078)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.access$1700(ActivityThread.java:275)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread$H.handleMessage(ActivityThread.java:2168)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.os.Handler.dispatchMessage(Handler.java:106)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.os.Looper.loopOnce(Looper.java:210)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.os.Looper.loop(Looper.java:299)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.main(ActivityThread.java:8280)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at java.lang.reflect.Method.invoke(Native Method)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:576)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:1073)
04-26 15:50:19.419 14594 14594 E AndroidRuntime: Caused by: java.lang.NullPointerException
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.crashlytics.CrashlyticsRegistrar.getComponents(:298)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.tracing.ComponentMonitor.processRegistrar(:28)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime.discoverComponents(:118)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime.<init>(:100)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime.<init>(:46)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.components.ComponentRuntime$Builder.build(:407)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.<init>(:439)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.initializeApp(:296)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.initializeApp(:264)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.FirebaseApp.initializeApp(:249)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.provider.FirebaseInitProvider.onCreate(:2276)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.content.ContentProvider.attachInfo(ContentProvider.java:2421)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.content.ContentProvider.attachInfo(ContentProvider.java:2386)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at com.google.firebase.provider.FirebaseInitProvider.attachInfo(:61)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        at android.app.ActivityThread.installProvider(ActivityThread.java:7839)
04-26 15:50:19.419 14594 14594 E AndroidRuntime:        ... 11 more
04-26 15:50:19.420 14594 14594 W nbanks.instapay: type=1400 audit(0.0:745): avc: denied { search } for name="mqsas" dev="mmcblk0p46" ino=966657 scontext=u:r:untrusted_app:s0:c223,c256,c512,c768 tcontext=u:object_r:mqsas_data_file:s0 tclass=dir permissive=0 app=com.egyptianbanks.instapay
04-26 15:50:19.422 14594 14594 W OOMEventManagerFK: Failed to mkdir /data/mqsas/hprof/
04-26 15:50:19.425 14594 14594 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:20.090 14594 14612 W MIUIScout App: Enter APP_SCOUT_WARNING State
04-26 15:50:20.090 14594 14612 W MIUIScout App:  (Current message: duration=2502ms seq=2 late=22ms h=android.app.ActivityThread$H w=110)
04-26 15:50:20.091 14594 14612 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:20.091 14594 14612 W MQSEventManagerDelegate: registerApplicationScoutThread getMQSService null
04-26 15:50:20.091 14594 14793 W MIUIScout App: Event:APP_SCOUT_WARNING Thread:main backtrace:
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at android.os.BinderProxy.transactNative(Native Method)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at android.os.BinderProxy.transact(BinderProxy.java:629)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at android.app.IActivityManager$Stub$Proxy.handleApplicationCrash(IActivityManager.java:5572)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at com.android.internal.os.RuntimeInit$KillApplicationHandler.uncaughtException(RuntimeInit.java:184)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at java.lang.ThreadGroup.uncaughtException(ThreadGroup.java:1073)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at java.lang.ThreadGroup.uncaughtException(ThreadGroup.java:1068)
04-26 15:50:20.091 14594 14793 W MIUIScout App:     at java.lang.Thread.dispatchUncaughtException(Thread.java:2200)
04-26 15:50:20.091 14594 14612 W ActivityThread: registerApplicationScoutThread result:false
04-26 15:50:20.092 14594 14612 E MQSEventManagerDelegate: failed to get MQSService.
04-26 15:50:20.092 14594 14612 W MQSEventManagerDelegate: reportAppScoutEvent getMQSService null

I have kernelsu next with ReZygisk, lsposed, hma-oss, tee simulator, tricky addon, that's enough to hide

Note: if using magisk you should ensure denylist not enforced but add instapay to denylist,

hma-oss is mandatory to hide kernelsu app, or even magisk, or use spoofed version if ksun or hide app from magisk settings if using magisk

If not working tell details about you root and modules to help

NBE never worked after the root because it relies on the play integrity check but it was fine i could use the webstie.
instapay worked with some tweaking with any zygisk fork and even with lsposed modules installed and trickystore. now since the last update it stopped working at all.

I'm using magisk. removed nearly all modules started clean with tee simulator rezygisk and pif fork. temprory disabled adblockers as well. Now google play check returns -17 error (transient error) and instapay still crashed once i start it.

[hexman1999]

For nbe, just add it to tricky addon with google keybox, even if revoked, it'll work

Although instapay works without tee simulator but it can be useful to add it to the list

[Ahm3dRN]

For nbe, just add it to tricky addon with google keybox, even if revoked, it'll work

Although instapay works without tee simulator but it can be useful to add it to the list

is there any place I can dm you?

[hexman1999]

@hexman1999 telegram