Analysis

  • max time kernel
    162s
  • max time network
    190s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    18-06-2024 10:07

General

  • Target

    bb60092b4d1ac220ea497113d1ab8eae_JaffaCakes118.apk

  • Size

    17.0MB

  • MD5

    bb60092b4d1ac220ea497113d1ab8eae

  • SHA1

    5c31b0af7e60b84a10c42997551741ac5889c2bd

  • SHA256

    a9641e058755a75f7b69bf10bf81506b5d17fa0b531c907b99cea87f6ef10548

  • SHA512

    b352b8c3d0007f79f7c8411013b053a55bd9e2bbad9adba173c510aeecd7cd5c1f5861ab810a91fed0b764cc9952072122cc56bf2353df453adcf40dc9e8541a

  • SSDEEP

    393216:5QHVNXdT+u3VnxmHYeqbDlUB8AMBZJv50NzVc1iGH5R:5yVz/nxeFO5UB8rBZh+Nz21iGH5R

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 5 IoCs
  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about running processes on the device 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Checks the presence of a debugger
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 2 IoCs

Processes

  • com.anddoes.launcher
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4278
    • /system/bin/sh -c type su
      2⤵
      • Checks if the Android device is rooted.
      PID:4568
  • com.anddoes.launcher:wallpaper_chooser
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks memory information
    PID:4397

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.anddoes.launcher/app_crashrecord/1004

    Filesize

    229B

    MD5

    fbea2d871a1ba0b9f49ce418a2cb662d

    SHA1

    2f032bc9d003a9a4760f74647132c1b531dd62b3

    SHA256

    405cfdc2fb82a2f5946d5aba48feeb288c793d66188026328803e5473976f181

    SHA512

    f6cf0aca9770ece36820776dde74f70989fc47762bf5661cfc2e1e0a596b31838a0b6f8664291c235041d1f1950991e43f0766abe47d1db8133a335129277eb1

  • /data/data/com.anddoes.launcher/app_crashrecord/1004

    Filesize

    229B

    MD5

    48b0a09b909de792d4f922f385881a6b

    SHA1

    f33f861eddb11d7be61b1f0c71bcaaa2f0d19af8

    SHA256

    057e42ffe0dde580b845e4a7af58dc9e67005356a93371d6db71801d53168e6f

    SHA512

    c35f2b3a142007b86bfe33cafe6893d4f937d132af79196d9f2fd819cc2ac40323c8ed391e66a3eca171e63b808eb1f7711c21cdf23da9f19375e27fdba04069

  • /data/data/com.anddoes.launcher/app_crashrecord/1004

    Filesize

    479B

    MD5

    d6b4c90ee6be1f5be2c5ffe67d150150

    SHA1

    e9674811f4a651b19fc3b44f413293a1350976a4

    SHA256

    8792d1c225a203594601e84cb182170dff48a0a8a9462cae2461e5a8f47ce97d

    SHA512

    47cb827c3f67d4cec41617f57454570d39a6dcd285871d7718d4d0cd66b8579bc3df9052c561d1811a2d61e8022563095e96d26794701060111bd617c88fdfcf

  • /data/data/com.anddoes.launcher/cache/net/083b93e05f211e5dcf6a467b6f10b3f6.0.tmp

    Filesize

    406B

    MD5

    987db33a12da8fe8acd71bc387482e89

    SHA1

    09956c87180cb100d40397fe25860eb4dec60030

    SHA256

    e91eab017cc5057fd8054cd909798651354deebcd55ba7bac4d1452ca8c4c4f8

    SHA512

    02e3a9040dd5375491ea53beed47a962475db8dd87588e604169c1662ef4bdfd7e2947286f94175b6514a6a61e5d95bb15b2fdee5bf4cf711965619862cbe363

  • /data/data/com.anddoes.launcher/cache/net/083b93e05f211e5dcf6a467b6f10b3f6.1.tmp

    Filesize

    226B

    MD5

    52517534e26c9d2799a365b5c3b70592

    SHA1

    fcb82e0203ba28fe6608a15494b8676c750588d8

    SHA256

    69c8a38cfd21c17922f9ff84e46d4070b9f2656fe17ecced8eeecc5a35ce16d1

    SHA512

    19c72458739e95a8d74a45018b2e510b2bad63737b969f1d72aafdaf43b33ef2d6bac315b4375281f45d6e07bd6705797f367017999fb0a8bf8bc7117851d5af

  • /data/data/com.anddoes.launcher/cache/net/30dd4fde582d687f467024bc5fdf120d.0.tmp

    Filesize

    7KB

    MD5

    def5c5c2d01f07490476385468723dc4

    SHA1

    05b7f8ab9931d41eee9d8cbc7c2d7801a504f759

    SHA256

    edcef27776dbe4915e97335bafe9195f6d2701b657fcad2902b550ecf2a5afcc

    SHA512

    846f219e7833b934a8b5cb4713f4d7aef166ae14846a72f0b32796f1b2872bbd38fb729600664fff17da475140131ef2ec1b4efc4eef8827ca39b048cb232512

  • /data/data/com.anddoes.launcher/cache/net/30dd4fde582d687f467024bc5fdf120d.1.tmp

    Filesize

    219B

    MD5

    20b8c08aebc9935212d620779d82576c

    SHA1

    7d674245726dca9e4fb7a1ee232ad852db51695a

    SHA256

    82169707537f1789c0bd18fb1bc117ca1fbc2a27989a68c0df902aa6295925b3

    SHA512

    9d18f64e89d127b34bf9ba96773ca0c133c090f97b0f8fccdc00131b8a29a62fc04fb51178c658e9d7b3403f8b545912cc6be4614abcd67d39d971658c27efb9

  • /data/data/com.anddoes.launcher/cache/net/add87a5841b335a3b8be4e1ae0cb00ad.0.tmp

    Filesize

    492B

    MD5

    a07270caf238d3ab86d60a060402519f

    SHA1

    199649e7dd39dbc2bebd2b7cc7ce1eea326b9d5d

    SHA256

    34bfcf08121fb0e3d89975f4f8af7faa30cf261901d952af17dede5492e079b3

    SHA512

    32d56cdebbe489c58947141a4892082d9064edc794738474cb30458e1967da63d95b63b94d3ff6771dac9779268181966f6b70cbd62a209e7e9833e10e87a47c

  • /data/data/com.anddoes.launcher/cache/net/add87a5841b335a3b8be4e1ae0cb00ad.1.tmp

    Filesize

    2KB

    MD5

    af4165ca10e7fc899b7344804784fc51

    SHA1

    2fb33d9995dc851fb23adce21028694f0c4a125d

    SHA256

    1b0c1bba69303810b00f1cba542646771f87298a7840352d783950b6435ab146

    SHA512

    79f9dea6f7ae057e64d2b5fc2811d4ba4d499c2daf0373cd2a929646967896b6a389ac446b3692b8a334e4fb6af4b78116bc76d881cc207ef7246ebdda149d72

  • /data/data/com.anddoes.launcher/cache/net/d81693d78510d27b7578c9b2b5367f74.0.tmp

    Filesize

    7KB

    MD5

    113ad895bfde2c3d5d06c2c057733f42

    SHA1

    e89b7f2e2cb2c29750388138c894c71a3b62d41e

    SHA256

    0c9f7c2a1ce6388e5149c15e93a6730dea0795e881f9650fa1aacadc047f7c8a

    SHA512

    7280eae2b2dcf7b7059b1aa4fe6f36471b09c2697cead00709b55ac67ce2cd42129a67c46f35cb48895b278b719cc70e04350ba9e53bd4469f473166ed3ab5f0

  • /data/data/com.anddoes.launcher/cache/net/d81693d78510d27b7578c9b2b5367f74.1.tmp

    Filesize

    74B

    MD5

    88f807bc6795bd5d57b10aca6dee886b

    SHA1

    b227ef89c05249ab10fe2c70e8e552d8de373bfe

    SHA256

    515f6fe842f987c665be4f0f210ff368ad6a8d86e0f2e3e68e1d0d8a2ac44ddf

    SHA512

    9e17721e060d8b6b9e24fc30658762f2512d86e2ca6f91ab999c53c562623a4cdcf97c7166075325196431fd7bf1cf8ec0e413ef1b2a8cc1e3e528479f15132c

  • /data/data/com.anddoes.launcher/cache/net/journal

    Filesize

    210B

    MD5

    07a62cfc681b783f20caf5811a372cbe

    SHA1

    7edab7c85ce87b6b14c11165702116cea75e45d1

    SHA256

    1b31e7929e2a28d697a5a53289e2d455927f4f7f9a0547b1ef4a306c91a6beaa

    SHA512

    09389ccaeec89a51cc5368aafe37aeab22ede5296bf8a229e63490c6f057e85620baca6a4e6fbb7e35a750c4bf45d4c29a17ab8be9fa5913e0cac4aed9390f58

  • /data/data/com.anddoes.launcher/cache/net/journal

    Filesize

    382B

    MD5

    44b4e513105a0f5abb4d399a7a97e0ca

    SHA1

    92aed73d19da72ce20539bf1e18856b1472e4e86

    SHA256

    3db2e41e9830c0ae55fa46caf44d6ad2623672f13b5e24f5feba5e3a4a09d1e7

    SHA512

    40e5b4c60772f7591c0b46fe2806626b584e34ce6709ed55342cc2aeaaf1cf05ed07ec2d1d05432b5a18668e98dadea25a0fa56bfacb035f4dcad50fb61100c2

  • /data/data/com.anddoes.launcher/cache/net/journal.tmp

    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

  • /data/data/com.anddoes.launcher/cache/video/weather_video.mp4

    Filesize

    996KB

    MD5

    95a886008cea34df0e2c503d4d93579b

    SHA1

    fbb719cb3e846ecaa3c689c70ec0621d7170ead3

    SHA256

    5aa207b8da2130238c7ca20dd8c9097918fb7b861fdbb58a8d9bc0c389a485e1

    SHA512

    4cc5cb14ad11db3e8098af47a10ffce07e3ac28786c6ba8ffb318c7a0d8d3f103a93986fecfef213c32745210cb4099ffbc3b1fa98a11fdd2ba618bf65f5e8c3

  • /data/data/com.anddoes.launcher/databases/WeatherDataLib.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.anddoes.launcher/databases/WeatherDataLib.db-journal

    Filesize

    512B

    MD5

    4ff9feea07afa1dc503b081c2412bc67

    SHA1

    545d7b874500416cc7e7e705bbdb0881efc4780d

    SHA256

    62dff12a5d06ae611e66a6c54c046f754916d49a5fbcf8245592486e420a895c

    SHA512

    ac38fb0fef05f687c0d060de718034c9566cba35b130d62fa910d518f9eff9fc4060b10a93e0719b6ad2e2f0c9c58a5a5a2f4460b4c6db8f5c1e50861fcb32ce

  • /data/data/com.anddoes.launcher/databases/WeatherDataLib.db-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.anddoes.launcher/databases/WeatherDataLib.db-wal

    Filesize

    112KB

    MD5

    e6c805f8780814491a821208d3311ce9

    SHA1

    2c84f37e7067388a30fa38c24b0d533b1eeff2a6

    SHA256

    634824b966df35bfb9c6b18c7d051e6336daa1df8f19430cf5a6e3375295014d

    SHA512

    7ccfc63693fa5fe90dfa30f9ff3d58f3987e6d0c8d7f70c41565d8f99d065a64ac62e8a03bf1fa559fdfc80276de1a7d5ed43b3f9644f2da4c3cded2b29bcfab

  • /data/data/com.anddoes.launcher/databases/_lib_geo_location.db

    Filesize

    4KB

    MD5

    fbb12d0a22b11cbb0bff0a1884be24e0

    SHA1

    0fe2c0085ce30b3bdbf375bc7e5541344fe77abf

    SHA256

    1886e87f26365d1d35a6f0ccb1d203764e89c4f807a91957fb877bf6a0b32606

    SHA512

    e3e5efba6a45234711f568cc25d010cd7d22c731eb8a0b15734d02f841b919f51e36bb941668e18889321d2fe858c7c69eadd5f5df1275eecf48c57402d5373d

  • /data/data/com.anddoes.launcher/databases/_lib_geo_location.db-shm

    Filesize

    32KB

    MD5

    570dffd019f7d996c777e558560676f8

    SHA1

    217a52536b798772fedf04667f82dc4df0c5146b

    SHA256

    ce80afc0419321ef79e98bd7895778bc5fd510427d72810c6d4e6745fdc2a915

    SHA512

    f003f903fcfc88a543a8d95cae500532e2abf242fe8d4ff05e1475d835e568658be08d1288248d8a91ad67734fdff9a515269dc48d6173c6ad385d17ec6a776f

  • /data/data/com.anddoes.launcher/databases/_lib_geo_location.db-wal

    Filesize

    40KB

    MD5

    918f7460b8b1c8b1a8265efe6710ae54

    SHA1

    63a8f8e6e1ee322fc690385ff958cceadeda4467

    SHA256

    3e4906930451ffe71c49b52e322ec2f1237749afb0dc025bb37d6a0b02707d74

    SHA512

    1986a5e3ccdce43b70024bc6bc8a287afa8166f5fdaf8a9540097c03dcd01ae3d62bdb0869b14b076c958edc2f273cc61f19900a869ee67998051861f28eedc9

  • /data/data/com.anddoes.launcher/databases/apex_icons.db-journal

    Filesize

    512B

    MD5

    1bc54ac39014fc5b93199167be0431c4

    SHA1

    a9b6536c98f4671c85f3e80a89afa621aca358bf

    SHA256

    2974e7543fd67ca27a25624d94b24bd8ae67fcc5d5f0c780d3d239dd8736699f

    SHA512

    accfbaf0c6a5887ad15778f2f97918701f8be938d73a9655761c99940c7856771dfa508334d6b21ffdb652fa933769ffe54b511bf41783de500ba85c29c359d9

  • /data/data/com.anddoes.launcher/databases/apex_icons.db-wal

    Filesize

    32KB

    MD5

    952db2111728845856b22ccf97a6db41

    SHA1

    e63c9c21de65ca1583681d19fa2a7e447c255314

    SHA256

    fec96dc3df0a80c960f328259ff1acf54f7267a25fe350d8162b888c2445bd25

    SHA512

    963b8fd57e9fdd39e5173b405966320b7b2b8032c9b80cca092a401c231aa04015acfea203d407e20f0ab21a6e39b1af831d4b2dda6d9c9995b47d5b5a998ad6

  • /data/data/com.anddoes.launcher/databases/app_icons.db

    Filesize

    96KB

    MD5

    50cc739589c31cea7aa744134c8a816e

    SHA1

    deb5d91fd0543147a316d3af336ba7149169e9a8

    SHA256

    0697147cf4118eb2c0cbe9687955cee4f4af2470a0d397813a5e1e60d6d71c82

    SHA512

    10a59ba37eeadd7e9aff99b25c8809afec0d3c4150066d67baac67e704f2f8ae1c86c0f1816fc739d522dc7fe90d29b81fe36e3273f2e40f281f489b39d2dfc3

  • /data/data/com.anddoes.launcher/databases/app_icons.db-journal

    Filesize

    512B

    MD5

    4ba0caab09103340e5d6a5d9b40de206

    SHA1

    04d984faf69e1e9cc8aeb2de91fa7dd9a7797a16

    SHA256

    557f1a3dba9ce5bacfcc26e77ffb704902e1ceba7ae8b68ff6f7eef4cbfed648

    SHA512

    2f2f98c8184e00a6419888d6211afb75dbe57c4673a6e2d86f1b727fd931831ee115a61b7528c86b824c7a5160fb3d55b3370a610337ec972647c8180860efbb

  • /data/data/com.anddoes.launcher/databases/app_icons.db-wal

    Filesize

    406KB

    MD5

    4196ebec5732cc4dad774a4946177fbd

    SHA1

    70299607ff171addb59f0e010f7961f9d32bb50f

    SHA256

    cfb78c0bcbcc575926c14c7f61565c91123d58c9cb140bad190b323e547b3b8e

    SHA512

    da2e3ec5d81106f32de18952bb6e9b93c849e5bcf5c4be734b5e137e1fb9ecd51801d7c51cfcb2cdc0a4a80fbb3a9aa9f54b81773b0c852d97f0fb0e6613b23e

  • /data/data/com.anddoes.launcher/databases/bugly_db_

    Filesize

    4KB

    MD5

    b5474a38d62b0467f2d352651d61b019

    SHA1

    eedef9762c1a0a40bc7354f636be434c142cf884

    SHA256

    8db1682d5cbf949716f9fa626bbc797436ec0ecfbb0245629ae87ec20f5fe863

    SHA512

    b86a1b58dc9855fb7c28a45b1ebf8809948a56b8a64dd5d37296f0a56624dbe904b9d7235acbc6947a0c49b20a7b3f17d03d3ca52333d56cc62bedae9926b02f

  • /data/data/com.anddoes.launcher/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    facda0b34b0d12603317916eac038fe7

    SHA1

    c3f511842de26550a3c3b1e23683bd001c1469c4

    SHA256

    052b679eba8ede1f3c78b792b1bcff994acc2885e141f471d94ae77a5fc547e0

    SHA512

    699d7479f096cbd2728a8f62b4628460bd93b3e6b04c495f76d1b1f43c9dc55c8eeebd8d0ad156065f33ae7180b6b84c469be8ad10877ce5ca1df118b25fcc9e

  • /data/data/com.anddoes.launcher/databases/bugly_db_-wal

    Filesize

    80KB

    MD5

    b71b0a2089e7b547d2b0532b7a25c506

    SHA1

    ab93845d9db0e058dcefc594c0b39d27e9d3b134

    SHA256

    06891cd9fcbd852e4046bd72dc85adaed72801eb10091bd94f73f95e7a51593d

    SHA512

    02e602807c00d5071dbd2a85fe56de431bc9cda5fa3b3c427941faa34fad666c9afd25d6f82fa35ae124270621f3e93466b962ea66da333aaf6b2ec9ebc87a50

  • /data/data/com.anddoes.launcher/databases/custom_item.dataHelper-journal

    Filesize

    512B

    MD5

    08cb1aa57251153a79d637defd096aae

    SHA1

    83ddf6026ee8cdbef97abfc07118152c9e184649

    SHA256

    be5d46da83c1eb8cf21c3e8d190c097afd4e2887c557606c22e67ade7892fc6d

    SHA512

    d34ee2ab7b682d27c7dad957190475de9113edc5bd0ebb61414413ab85b28df7d8c0e574052f9ff8c8b3c43cebf26215967c810c76f06b8a78bec218ba0e3a7c

  • /data/data/com.anddoes.launcher/databases/custom_item.dataHelper-wal

    Filesize

    32KB

    MD5

    27d018b639d0cf73000db3e37824e4d1

    SHA1

    3f0e1cfc1b12cc86e1c4f5b56afa3778734c13d2

    SHA256

    c06df674e04f312fbe335382c0297f930746a0a01e01f7d2f387b447d2a419ec

    SHA512

    ae6d9efc3b0278a01f04340e43c0c3daf642906bf282f5f8ecb46ac438b07009a67113ebd0ea5f5b5b1d1b358d531bb32222030d1bdd50a25504b627544938db

  • /data/data/com.anddoes.launcher/databases/launcher.db-journal

    Filesize

    512B

    MD5

    98c10c2fca563d64d4ff816cb42dd438

    SHA1

    3cd769c4a41a31cb906adec55e6e3438e9153aef

    SHA256

    c82db4adccbd31d3ad5c87f0049bfd78517553ef605cfbccffd9112fb52ef66d

    SHA512

    a254c5dad9dd37650584851ab22796aa109eaf6025c01ce95e88c3ec620fe79a30d83b5876ad69b9e352f3478f4e8335d0fbfaffcdc492d75a71050ef8da001f

  • /data/data/com.anddoes.launcher/databases/launcher.db-wal

    Filesize

    293KB

    MD5

    66842b0266bc7a21ccb045fe777d070d

    SHA1

    4bd89e34832499b16968efd8320b4a1a315423e4

    SHA256

    7385b3041c4bb6f0039512f74b2bc4ba5f4bc87b373f71788858b5ad6cc55366

    SHA512

    0050bf2b29b1a98ecab028860a3abfbad177b2b783b275d2357ecdee57f00e0d4fd59e50027ea89b6cc21ff96eb5fba3ebc3ede44d407f97926b5e2f7e8b8b91

  • /data/data/com.anddoes.launcher/databases/lib_recover_image-journal

    Filesize

    512B

    MD5

    ab040ae7227e3c089b2725303e82284b

    SHA1

    a1733484523ce9a3fcdd54f1297d25f920a79e15

    SHA256

    d8ff4b50227f97fbcced252a5ba6cfcc44d14314d14df91dca315f4e12228592

    SHA512

    6f6454b0539c16e53b7909601ea49e65536e29595df9690e9257524b1304ce7df98eead80bc4e076e6050f08302b5b17ac20cb8ca75b21396978000b3622c566

  • /data/data/com.anddoes.launcher/databases/lib_recover_image-wal

    Filesize

    28KB

    MD5

    c53a80907f232c01599f521046ba58cd

    SHA1

    977b51eddb6a799c07a8feb76b6a69b42aee247a

    SHA256

    d7b880df31ccff011461c5d3641ae0244b214340c0411ba0ae16ee711668444d

    SHA512

    3ea755abc44d95497dab369e4fa28b78edcb330cd5b555c3414ff9588dbebae1225a4e59479e1126fd896c01a63ea9b8ed1c60611a8a956a8e057360f5c45394

  • /data/data/com.anddoes.launcher/databases/secret-journal

    Filesize

    512B

    MD5

    713139513640acd32e8e1f0701c37e26

    SHA1

    e7185b8e8696d99289b0390ba8c33ee3a09281c6

    SHA256

    2d261cdc1485e5586b6b26566d3bd7c6f3fece842cd63dd30d2364aea9e2c777

    SHA512

    cb31801d53ff48e619d201733fa90ce83defd8652a5c6a8f47e29383106ade1c3d3709e6b7d343f71710ff8ea29dc22ee17d87e15192834ef39da139f014d52a

  • /data/data/com.anddoes.launcher/databases/secret-wal

    Filesize

    40KB

    MD5

    4fc9c6ece6061323674014fb24ee8d94

    SHA1

    ed8f9c70bd38c7ec90008c3a78958f07268ed519

    SHA256

    ba0c2448c48798b4c9e30a728791a411b52387461d2b30fff0fdd30b04036769

    SHA512

    99f91a8e81cbe108a74d35f5df270a3457ad7fa7d256ab8f709b3b2fb3f48a4c37db2a499a409237a3c283cce5594860fa813f7b924ebc0c5466dc3cc6c336c7

  • /data/data/com.anddoes.launcher/databases/ua.db

    Filesize

    32KB

    MD5

    62828a1d266f76e1e20c5a4f801920d0

    SHA1

    16a55e7b33ab2833bd6f99ca059edbb16b2e248e

    SHA256

    3870b32202a0fdc14f72898bdf0f2deaf59e444d83bbef1f7deb2ad8764d9a27

    SHA512

    62ba6421ad12e903b96e1ffac88a35cfc327878c60d12878e86808870ec757bb29944d9f9eb04059c26890a60f5b9a1828a9a9117e735e821ee8dec170644aef

  • /data/data/com.anddoes.launcher/databases/ua.db

    Filesize

    16KB

    MD5

    95ef37cef2782b228f638f706d298fff

    SHA1

    0a0e3d5a3a59ac7ae3e1d7af13c6f712dcf3f132

    SHA256

    b38e4fa6951882075cc1f5638dd94a9e2125c5830571107dcb1548aab4a963a4

    SHA512

    3051aa5fbd9565114ef434bad5c219d7fd6c27030a1dc0a177f31a1042ffd435bc704027014528bbe1b8c01fce1d4e8a7c066ec2ae9916174f73ff309559a7c6

  • /data/data/com.anddoes.launcher/databases/ua.db

    Filesize

    28KB

    MD5

    74dc93e06932b92b1d61ced454e34d0b

    SHA1

    5608faacebeecbe5ba77accb689eb510babea8e6

    SHA256

    d69529774d28771356e62afcbda51e3991942b25d4b85da5b4ff3bb14f8d19ee

    SHA512

    3f3d4ddf70d953e460c8a589734e18f5841531eea9587e2a2c0e76d5a2bf99d11eb919805d135f99d6aca732d8682f8305ccfed2f27fee3bf4af7b8ae9700b83

  • /data/data/com.anddoes.launcher/databases/ua.db-journal

    Filesize

    512B

    MD5

    31c6995b8f3f7310c6a9e49b684f5365

    SHA1

    7b60c463a1db492bd6e37473f70304804bf84835

    SHA256

    9c1a891fb1213079eef544d93477ad517a829ddc57f0eb5db02e6a80bbf63f27

    SHA512

    648565df6c1b280932514e07423b77ac2b543760686cc67e64461d23b8579e060f738e8bcd3f3c5f6c82ddd67ec0e8c4abb3b50196b6f27e1d0fb576a0ed42b3

  • /data/data/com.anddoes.launcher/databases/ua.db-wal

    Filesize

    56KB

    MD5

    f4899bfed8ef71c7f61cc6655ef4ec0b

    SHA1

    598413e81f1030c46bf37b0e3e0989e87af5011f

    SHA256

    7b2ffa05cc0b791da60cae13522f4cf758f8451fa13c0d4b0456f96a8d973d57

    SHA512

    b925dd0442a8699da71f5732b20458015fd809c726676ea4ed3dc66d15e0f9721d67086a38b17d0f8743058d7f06efd25bd0a79e27fb9bf858176f49416357de

  • /data/data/com.anddoes.launcher/databases/ua.db-wal

    Filesize

    4KB

    MD5

    3af8df7c9416c731bf50a08c6bce1dec

    SHA1

    516eb11d9effa3e08db7b92cab24542aade49448

    SHA256

    ad3af98c45b0b2d2f0d7a8c613b7d0d670208906556cdeb69e5baf3cabb09da6

    SHA512

    3ce21d13b326232bb6900336c6378212514bc4fae111f29f38e6b736aea3de05057f196b05091a88fd53c6cfe63645ad95975993805646d236025ff3279b5dc4

  • /data/data/com.anddoes.launcher/databases/ua.db-wal

    Filesize

    8KB

    MD5

    95735e1fc8a1f54abd1e99d171620364

    SHA1

    4f873c6a5643a360468b6caa45c1d65c1cd5208e

    SHA256

    26f2e33c24646afd760b28dcdbf0bd61d4954488bb7e21a898a884d87aff2371

    SHA512

    9bcbde9709e899ca0e4bad558c707b79760910cad53e46f704c39c3d6124df602c6e544565973b5013c41dcddc8a4c2384e7f17cc1a11960b0751fc7546cfe6e

  • /data/data/com.anddoes.launcher/databases/widgetpreviews.db-journal

    Filesize

    512B

    MD5

    81f5d50a112ffcf4cff741f42c5dc963

    SHA1

    93d2ecc7f6ec1d92d75c0b1ee434e38380b77fbb

    SHA256

    b54aa7a6d5d9badde6ae603cf286f05ae889d4067b90955e519c1b675fcbe008

    SHA512

    b7e5e72ade430e048a66376a5cac62cd1763c6f24902f746c5be5546fc5d7cf583736dfaadeee3379f66787fd92c457296b89da8a327fae1fa261bdc1d67714f

  • /data/data/com.anddoes.launcher/databases/widgetpreviews.db-wal

    Filesize

    32KB

    MD5

    88042041c7c647f3d5f32fbe6bd75e3d

    SHA1

    d0bb725ec750069950226fd83aa3c14d159d8993

    SHA256

    9d80217b935f9cf40832b70261d37e0b1a4a3b4aa9157e7342acfc0f7a13d4dd

    SHA512

    e8a1a42912fac213f102153590b624b25c94d51f4f7442c65279b0905fa1b3d0479279d50a3b5e6b26b83c5b62a1af7f283b7bf82e30b2c496f2ba964a093185

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66715C590113-0001-10B6-C7E71BEC1E0ABeginSession.cls_temp

    Filesize

    77B

    MD5

    b253cd952d11de9edfbd7e1538100b38

    SHA1

    a69f66997a239c94f2aa094434917bb81186436b

    SHA256

    d07080ce12dd5d4f240ca64aad2b5f98e29939f03d3dc6b4c7a53e6da39806d8

    SHA512

    5d573840db917c530d7dae42552d3508baf42f905d9aaddada17e6606b06b6c538688932dc57755cdd2af247d83a86c4f7975cecae6e1b3f83516bc9fef3e6a9

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66715C590113-0001-10B6-C7E71BEC1E0ABeginSession.json

    Filesize

    132B

    MD5

    4fb1801d4754df04bc8c4783b05e2004

    SHA1

    40c663b2e9fcba33cb4bac4fe7831080a4c459a2

    SHA256

    c967430292c0a1542b29435aa79291fa565ffc090e5425ecb38f21298ddb5d42

    SHA512

    b1fdb3aedf86797c8b8d3e1d22751834c782519a273ff774a1e71cdef94e62a4951d86a50bc7d8ea5bb694afa2fb9354ee404870b7646a211ba5d5ecf7480854

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66715C590113-0001-10B6-C7E71BEC1E0ASessionApp.cls_temp

    Filesize

    117B

    MD5

    e7981948c15c7c8cdb322bba0a61dc1d

    SHA1

    58412b47b26e5040736dfd481440021febc725a8

    SHA256

    ce08ece6a466b6f6b376363f70979e7e8d2efc067b4b49bf13b3b457ba6e271e

    SHA512

    43ed9aa91b93b810e0c040b1c4de0d3a8278afffa138bea61b535ece56142cf8355883cfdb8586f23cc79de600c7bede5e7c1e4576d00c6ad3d398b650d2a795

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66715C590113-0001-10B6-C7E71BEC1E0ASessionApp.json

    Filesize

    231B

    MD5

    664a8794d2fceb8e3a98b6e45c4ff4c0

    SHA1

    8598fb27f2c2b3bbf97a4530e8b269bdb559c12c

    SHA256

    ba78010c8eac5ef03b3b2a3596589ca785c0499e89d37bf5e0750ea368df22ab

    SHA512

    c20dab74c0b9d940ff87df61b929cf17da65a0b696e3894b269f4ed6a9aef7d26606f2cdefb89dbb916b63b885ba6e619ef1319656b3e318a6c20f2f39e127c5

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66715C590113-0001-10B6-C7E71BEC1E0ASessionDevice.cls_temp

    Filesize

    48B

    MD5

    cf9cb0612d588a1f71b63084cea67316

    SHA1

    3d035bb92fd3f8997160cf8025c40239af74d3ca

    SHA256

    0d37c5a64baf86735501f9044eeb926b3d46548cdcf67c2cd1f773df36624ac9

    SHA512

    70f000233e181e3b7c6fcf07aa04fdb570f970335837f8d1c4680a9f78af9f9e17c73a0a5646770f7a8787e338899edc4a5197b023865a4da894b1aca12bf600

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66715C590113-0001-10B6-C7E71BEC1E0ASessionDevice.json

    Filesize

    202B

    MD5

    75db92d50c80a89e068550028c62acec

    SHA1

    d78ea55f5dc682e4da456d26383249f608fe894f

    SHA256

    1dfc488309883b61beb3462567a9befeaf36bb475a07a7ecef2be60bedb4b5a2

    SHA512

    dbb81daa5fab357f087dc295e7861444f945eb4c3883a09926b47312ce526bc069266a8a24b2a5b4921fb13e797696c5824195f0a79317e279ccf7855ca2ee13

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66715C590113-0001-10B6-C7E71BEC1E0ASessionOS.cls_temp

    Filesize

    14B

    MD5

    9b3d4522944ce6396563812bfdb92fa9

    SHA1

    6d2a6133c8f01938a48ccc77ef86ad8ca335c020

    SHA256

    d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

    SHA512

    091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66715C590113-0001-10B6-C7E71BEC1E0ASessionOS.json

    Filesize

    54B

    MD5

    93023624eb8dff5c20050da136aaae0a

    SHA1

    acfd1ffed752c28fb135ba83c0c6345ddf2f6995

    SHA256

    968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

    SHA512

    bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/66715C5E02BD-0001-112D-C92890C2F926SessionApp.cls_temp

    Filesize

    123B

    MD5

    f0e06fa434cea8d71029ca351c952291

    SHA1

    b6216731221ee3b82abf28be5577ea9f5ab25b25

    SHA256

    cf6a3765c87d4f25d272f412b493ed5ca9e180808412a2cd6b130e3a25322632

    SHA512

    544f705935e36f5559a324f4cb9474693d1957a98b426e015089ddea1adb2cbd477be672498112e1d4627950b812f4fb5ac443283f593357c842de8b524b9b0e

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    403B

    MD5

    d92aa8f26ed557e807203f1dc9801eb9

    SHA1

    bc84a2fbdbd91715da557935b8431af591095bdf

    SHA256

    9ef375ccea1f3cc6f1d6717a8877c7ef3879ca0d4be4a09d737dcdbf453c9a92

    SHA512

    b9edd5ac0457a02ca2a598d48d16b6ae737030403d3d41b4c331e54d75560799908475b1babe86cd440444fedde9d99e60ba27d197589531993b60a858050010

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    2KB

    MD5

    c5ac980899b6bf368a7f8b655d3f135f

    SHA1

    46b20e0d0009ef7db1668d1ce6cfc2b30b5b756f

    SHA256

    d283ad0ee1eb37ebaa4a2091a88a5f1b308947557406c065f927f9b0cb3c30ea

    SHA512

    2ef1b5771a4a64c9633cfc304012b8359847fe7f559277fba788ba650ae856f208c1a05591e91f08ee43638e1f83cdb6e28ea3c3d3990f074d86a170576b5bfa

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/com.anddoes.launcher/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_8f4a4fed-682f-49e8-a595-e2b761c343e5_1718705254739.tap

    Filesize

    324B

    MD5

    d946f4f33736f692715a2448153e590a

    SHA1

    f858c526b73eb2173d1661818ceb1d8139135c81

    SHA256

    72d1746b024ef5dcd1e4ca356668026d29a43f4f6a1adf15f5e9ac2b89c37fe2

    SHA512

    0e888c908fcf0a1a111b3de4887e5fdbce5de4c74b08cbe62313f7d969d9073e21bcd3c9c54b6926bba1fea9b040ec8e49cad31682e5cc35740f9cdbb22bc221

  • /data/data/com.anddoes.launcher/files/AppEventsLogger.persistedsessioninfo

    Filesize

    479B

    MD5

    c3a2d252c7fa275934ad23ddc4f8975a

    SHA1

    60740b8524a0ffc24d8c49f1f3e224404fdb2830

    SHA256

    4fcb50b8601ae4294760687784da2778128cef8a53269cb757ac9867bb3bcbac

    SHA512

    e3f1e3abed1a37eedaf2befff94d29859f8907484d62ba40d362df211d850d345a9a8cb92d53789205666b663730258a06427fe3aac2165c2aae0145d0329b04

  • /data/data/com.anddoes.launcher/files/audience_network.dex

    Filesize

    1.2MB

    MD5

    b3a3c8fda254120cca40540e3095ffa4

    SHA1

    fb9f185563b0b933cfffceeed42d730aeec5697a

    SHA256

    bd7ef2aeda3eeb217d75aee74b8e67bfa477ffad3286306035400e94697828af

    SHA512

    eac032cc876be2e3e065c3c5e34e85cf508d33e2509105d0f0f7c1c36fcd1a3e3460584ee37bb8671ad27941135c31d6f9a2e11ad88c1f1559294716d9d45a27