Android Rooting: An Arms Race between Evasion and Detection

Table 3

Directories used for rooting check.

Directories	Use case
/system/bin; /system/xbin; /sbin; /data/data; /system/usr; /system/bin/.ext	Likely contain su binary
/system/app; /data/app; /data/dalvik-cache	APK files and cache