Malware Analysis Report

2024-12-07 17:28

Sample ID 241112-r3wsestmc1
Target NSLauncher150.apk
SHA256 4594f229ca766001a165fb99ff851716f2458f5f7d36382062ba45a3e3b82783
Tags
discovery impact persistence collection credential_access evasion
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

4594f229ca766001a165fb99ff851716f2458f5f7d36382062ba45a3e3b82783

Threat Level: Likely malicious

The file NSLauncher150.apk was found to be: Likely malicious.

Malicious Activity Summary

discovery impact persistence collection credential_access evasion

Checks if the Android device is rooted.

Obtains sensitive information copied to the device clipboard

Loads dropped Dex/Jar

Queries information about running processes on the device

Requests dangerous framework permissions

Acquires the wake lock

Queries information about the current Wi-Fi connection

Queries the mobile country code (MCC)

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-12 14:43

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE N/A N/A
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps. android.permission.SYSTEM_ALERT_WINDOW N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-12 14:43

Reported

2024-11-12 14:54

Platform

android-x86-arm-20240624-en

Max time kernel

599s

Max time network

589s

Command Line

ph.mikedigicrafts.nslauncher

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

ph.mikedigicrafts.nslauncher

Network

Country Destination Domain Proto
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 216.58.201.110:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 216.58.201.99:80 tcp
GB 142.250.179.228:443 tcp
GB 142.250.200.34:443 tcp
GB 216.58.201.99:443 tcp
GB 142.250.187.206:443 tcp
GB 216.58.201.99:443 tcp
GB 142.250.187.206:443 tcp
GB 216.58.201.99:443 tcp
GB 216.58.201.99:443 tcp
GB 216.58.212.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp

Files

/data/data/ph.mikedigicrafts.nslauncher/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/data/data/ph.mikedigicrafts.nslauncher/files/BackgroundIconColorArray

MD5 cb49a618ee8b2c629f9e15ab538dec6c
SHA1 4b7e0ac38f4fc67bc5c2b52264e261f483a7c023
SHA256 b2df5761a77912f4116ef499e345d2878942331d57774c477c0d71cb84436e52
SHA512 d7bf053dc897aeb1c4a894be35253477519a48e59a7de34f30e3ca1bd71e8794e21aa164ea9661bcca4941606d0fa7e5f53d4fc14f4062e068c7083848b101c7

/data/data/ph.mikedigicrafts.nslauncher/files/OldAppsSelectedNameArray

MD5 3c3bf3637034cc42772eefcc37f56979
SHA1 380f55b3b36eb17fec45fd96a502a09e8a514d9f
SHA256 84c7234b2f5c7703fe8657a9ec632a35da73a8eb5a9a05d04870ff6c10528ae3
SHA512 364cd6168ed4b9e9356544d906109a7ccef66df9c1776f0b66abcee5fe032a14a157aef45e8b1a212bd142f0cea665208053fd07c9891abcd6e354a7536c850c

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.android.camera2.png

MD5 1c92997f1ff606f0a0c5d644f52dc501
SHA1 c39016548a3dedb085f0b7ea44521a6eb2a70145
SHA256 fc8f29e0962ed537c3912ca831c00f7fc01dc2ce501f35d00de9111e17d727eb
SHA512 7fd2ee2819c6423712eef56572c9b352d5039963b2baedcbc09db0c2035834edd19e7df9e6a53d8bacda86d2549c146786ceb2dff3d451cbb57f7b9927ed382c

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.android.chrome.png

MD5 0717c954677883309d2b952b7ce423a8
SHA1 0275693e1bd25b321ad62fcb27694ae66ae06620
SHA256 04988a485dba5b61b05edebfe538008b6d2a6cefa7cc2bec033adae7d4e0ad41
SHA512 56ffc7763636c24239453b8489ec57a4949ea5c9e25c51d94a37d4ec845844de1c21024d96faff97f0e961a5ea483afa4b60b426086732a3c32f95735570b0b9

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.android.contacts.png

MD5 1045d0a557823c2f19c66b57dc87541c
SHA1 26d403ba15c1aadbaf483f386b76dfbbeb7e045e
SHA256 795e7cd96fcda49a7b318e7e9afce60e64762a0a03ea160d2283fa0afea808f5
SHA512 6a63fb2402275a1909216ac66620853709787a0b9a9d2c49e01471fdbd1c4375d44536b3defd59aac38858197a73d3efc34dc2cbb9a32ddd2df07c463e6b530d

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.apps.docs.png

MD5 6f81f2ed9eb650da4e3774f07c461010
SHA1 a56bb57d7a4c5186b6cff4cdd016fb4dfcbdf0a2
SHA256 47af46c5fa2513ddb522bcdc0f359686ffcce777fec7b54afb37fbe0edc14056
SHA512 85e0113c55c4c216b75ed51179b3060aa6db48215187f3e7797876616ba7db373492ae30b0e54ac8fef466c2d6ea717c176b2958f53a3a286475cbfe6ef50072

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.apps.maps.png

MD5 46741adfcf5976d4db2057e49bd60d62
SHA1 d07fe5c4211bc44fc1b41ee1c3af874f917a4f9f
SHA256 3704268d907225232a325570c99757f14177ad076c3de8567db65f9d9110c541
SHA512 7e061dca8e557068479794a842d9799ab189f03814e632499edf44188c71865eb6dcadf015cd017dd15eab709ff211417a3fe7a438ee1f5eda61e99d6147cb8e

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.apps.messaging.png

MD5 e0da90dace2784cd0edfb126524d6246
SHA1 968c44a6e7c05a79c6358ba7c89ee4b0e721255a
SHA256 33247a02183d4d5867987f664445da1d10cb9cb1bb4a84978910c68b65ec4bd1
SHA512 75e55600148a7f6f5befc1ebd3bf5fe5345732bd2a4056c6fae49e8439da4c1e9c6a3cb9f6de680e90a11ad112bbfbf7685469f3c7b99d823ed44f89640c4954

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.apps.photos.png

MD5 d69418a31d5858278358be01b1da4d43
SHA1 bad7bdc16cf5ef329c927f56cc9d6734ef762351
SHA256 0737f76afcaddec1246c0f9607a139a7d5ae4e2af4ed90ef34ecb8a8f63b1508
SHA512 279831ae4393923ac2c1d8b3fa10c7a6c2cdc8241a8e3d2361865d75b63184a75d81e2c4f9e4971f4b042fc387ec41cf701d519d88fc264d8df1b1039a14fdc4

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.calendar.png

MD5 f34d908909157f623bcfc2b034428804
SHA1 a2a63fa7ef22175954cb0e70f18c0e897dd73d91
SHA256 a839512bc0126e3fdf3b6c462413c1eb8be90727abde8729b7c4108fa281d8e6
SHA512 032e557211b391ff1c6523ae6f99b9b27a7935867fe199754260461e3b42863aecf2badb9f34df704640af272b32827c0c55a7fe214b89f383ab05eb80a93a8e

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.deskclock.png

MD5 7733503e5bbfb43c14f7b3abb967ec4e
SHA1 bdaa6c51afe28a9ec76867fe235e11ffb0a26d44
SHA256 a7f1e5b02919ad39c8120a5813a303251288be1727cfa137c96404a593c00475
SHA512 911689963209eb9df0a94107fd3ce8b103a9e5e58f313979604f895a6ffa209af77520bbc28da705123aff8f2084f0aa94a218eb68f3eb2981a2271c6e07e0d3

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.dialer.png

MD5 8afd159b185997c4ab72e0973bbe05f0
SHA1 6b9184a41503e7df052340adf9725aae39db6a6c
SHA256 eefbee0271546a2da8c51a1f2dbb8aefcd8c7331962e2d80be2ff2586d041a24
SHA512 1385772d05773cd4376b630df0ceffe0d330bb34bb58912683131abc20572eb0330947724f72aefa9ca3cdb882714d6cfed8fe7c4fed384180697e0be43d3784

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.gm.png

MD5 635299301e18b54c3a40e79842125b9f
SHA1 d1d0343b4a9579e27171f1d6bf784d2f8c047edc
SHA256 bea5e9216e85e58b880286be3e184ac6b36eecaa0621cceeb92858fbde1da7ff
SHA512 30c9778b6dd2e906acca53347f34aed831f2e65ac4e42060b6303d93600a13ddc0eb72bd1b0f101e85c9cac66264ea4382c2ce253249170d8ccf0e76c90633d1

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.music.png

MD5 c605df7717ff512ac229558ff4df7e49
SHA1 b8000343af327c3a800b9997044fc5c8e8562db4
SHA256 28d1a6fd1b65f0564256aa70ec1062236c3c0afafda06318eadb206f14870312
SHA512 0d5daa94db4c8ddb55927e5e2188f90173e05e5172602d2a69850ce7d0203b713d594f2de6b3d3b290a277292cc1084cf0b800197b4820403f3483c32ad2cca2

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.videos.png

MD5 315c1b62775547a48f3fe78a4f2028fa
SHA1 66c7d5d1b54fdafb1f703c02bf93074f3a0b18ae
SHA256 3f727c39517b90f263ef96a2adf16b6f48859f69689c1ddb3aa6bc73bbfcdd7c
SHA512 d2809ec54b5f55196f9ff4e1d140aac98a809e6332aa992528ebff5012f5c5c617a3b7b962c66a82f536a15732afb2bd14a8040bc082e72a168d6642dd365c9f

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.youtube.png

MD5 b7bdaa839bb6ca34d322fd9e3ecd95b6
SHA1 c34512efaccf3b6886a179347bbe5b57c8d3972e
SHA256 896b4d97ae107d87a6275eec45c57aa3cb139497e0a5dae0e54a8db4e828bd7d
SHA512 7398838e3ebc6145631d906e3a7b0b0b1de0ba2393c58a0ff081e9d7a38e464ea497c278c32f89697e192dd7930101757eff18b7da8da9222095fa7cf3a0a1db

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.android.calculator2.png

MD5 cbd3a4791e0518f2968efa93015556d5
SHA1 2ef69136de89db2be0acc670b4a1ffc133b49a16
SHA256 2cdbab2b00444521bbaf3e85525524f4b99308130718c6bcd7ad29cc4aa887be
SHA512 3e3151f096cb2477302edf1a472f8007f3c664df51d6c0b1b4152febc64d1e957f2c934a265bd5d45d4e581147b2bc640b846a1fbdada6669038f48ca650dfe3

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.android.documentsui.png

MD5 86875b009d6a915e8c0addf05c9b37b4
SHA1 f4f02fa5e122fa573c061123f12801a8452252fa
SHA256 1fba63663b191c4ea2ad5cc77bd0803c87abba73b3278842e47dd89cdfef7b80
SHA512 466fa386306850850b9122a4c35dfd4b312b61a3a34c7dafec97728d66e0f3e34649f3b21214a4c3810e05683b57a8a5c60dfde2586949f65f52f164f2468bdd

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.apps.wallpaper.png

MD5 f17491eb4b15e00b73ef89ec98d4e5e3
SHA1 327df531dc55974d9f1dcb3641dff0992aca39b5
SHA256 dc5935e15c5530964f59ad6d6b974eda3ef7d3686eb2f49c9aaef0f5481e4248
SHA512 fc9f8057469eb0995076be5f8e5d27ced355b638f6c98d653401bbf384f06a70c0d11354d4f922e4f285daa6fee8c0945365d7dc8d6f7b92a81f9379b0d06832

/data/data/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.googlequicksearchbox.png

MD5 6a44cc1766fb7e29abdb0bb35cbc11b2
SHA1 64e47a2bb9a923dec11321f34ff25f7804bdd07e
SHA256 72f19f8ee286d4b5852657f3e0eb56de057ce219de20ed0e1353777652f6052b
SHA512 8eedcfdc2e25e5db0ad58e900848df398b4bf266e3024cce723a9855a63a81f1b2332fdf44e38e85d9a60a327742fce0127bb1fe987d10314e52f476cdc6e0d9

/data/data/ph.mikedigicrafts.nslauncher/files/apps/org.chromium.webview_shell.png

MD5 86c7bad9acb238e4a42a76f34c631c8f
SHA1 a0170ae063cd4ca20a3d7deaacf9eb59e195d6c6
SHA256 b8ee11bf9320304d7090e195f52105e5ba7313020653889bac3a7fcc7cfa515d
SHA512 a414bf37644b94e2f025c0c53383a3a0f09dc24cbe964401dd7366a9669ce182444dd7847f7671eaedcf030c373ed3ea127111bbf21a2f0ea24a75dd59d32a54

/data/data/ph.mikedigicrafts.nslauncher/files/apps/UserName0Circle.png

MD5 d2808d3400a02f3c0f200a8ef8ffcca9
SHA1 31dda4d020472537c802d040e85c808465b1302d
SHA256 06e2882bf979d7823bca54befe839c06da5573fece8927d7abd9497aa2a2571a
SHA512 c02a8550cb61ca3dddb87f87599d0cf58d4205e24ffbfe86f39b9307817d4dd2da2001a3bea045ed716c5d59406b0b99a8dbc7a027e2fb89a32b36c41280727c

/data/data/ph.mikedigicrafts.nslauncher/files/MikeDigicrafts.png

MD5 e5ca505461e03709b7ec25752a6dbc54
SHA1 db00c1dd593633975915f79a48886b2f34a00ce5
SHA256 be0bd47f38278a63fd375aaa5b9a524629638b2ccf189792d7c61b47d72d5ef4
SHA512 95d470735b99073794ac3b22d3d5f4bcc8d5d1851b874c5026be9f31238751b116308343292e3909ec18f4249810e01d7248f54c0ea232db2fd1b956213a37ec

/data/data/ph.mikedigicrafts.nslauncher/files/RecentListArray

MD5 f6035037ef6b6b6c875819994c5f68b0
SHA1 28bef2abdddfa5aaff7e5e4751fc14e1703af451
SHA256 0bc92358b4423caf24fd6bbb03f17880a1fae08a6bd9d5b20a273294ee4fa81b
SHA512 edba93c0acebb86830c472a64936cb2a6dcf5ff3e351b49637cc8bfb9daef55fffe2a46a32ec47cc98db4a3f42be9e8ed0da2de5891365ee29125e2a2d3438eb

Analysis: behavioral2

Detonation Overview

Submitted

2024-11-12 14:43

Reported

2024-11-12 14:54

Platform

android-x64-arm64-20240624-en

Max time kernel

599s

Max time network

576s

Command Line

ph.mikedigicrafts.nslauncher

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/ph.mikedigicrafts.nslauncher/cache/1582435991586.jar N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

ph.mikedigicrafts.nslauncher

Network

Country Destination Domain Proto
GB 216.58.212.238:443 tcp
GB 216.58.212.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.206:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.200.40:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.180.2:443 googleads.g.doubleclick.net tcp
GB 142.250.187.228:443 tcp
GB 142.250.187.228:443 tcp
GB 142.250.200.14:443 tcp
GB 142.250.178.2:443 tcp
GB 142.250.200.35:443 tcp

Files

/data/user/0/ph.mikedigicrafts.nslauncher/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/data/user/0/ph.mikedigicrafts.nslauncher/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/data/user/0/ph.mikedigicrafts.nslauncher/files/BackgroundIconColorArray

MD5 cb49a618ee8b2c629f9e15ab538dec6c
SHA1 4b7e0ac38f4fc67bc5c2b52264e261f483a7c023
SHA256 b2df5761a77912f4116ef499e345d2878942331d57774c477c0d71cb84436e52
SHA512 d7bf053dc897aeb1c4a894be35253477519a48e59a7de34f30e3ca1bd71e8794e21aa164ea9661bcca4941606d0fa7e5f53d4fc14f4062e068c7083848b101c7

/data/user/0/ph.mikedigicrafts.nslauncher/files/OldAppsSelectedNameArray

MD5 38a3104f33d2f67870d1391b755defc6
SHA1 c303bb75c7594e04fe80c7cf6f16af223fb10a49
SHA256 dc855a1f3083d72eabd15c14d37dbc05cb7de2ed31b9cfd5a81868e09f090688
SHA512 f841312d0fccb490fd347f6e59412b30bfb97c527519cdc41790e5dbac52969dd5a095f766b6139b34fbef949df6b32a99df9adb3ca510fa671dc9ea6bb36ace

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.android.camera2.png

MD5 7f435672acc015154e721c439c456cf8
SHA1 19f2c122889a562c509043e142bbd7b61a77d5fa
SHA256 05f77f8e5b39b969ff3324b3b2a8585390e01b7bee68d614e84cd9318957c27a
SHA512 53c4c782dd49657c537f4c37f432d6a9a588b896341e0938b95f555635359386de46f2727171591c856a3481b05ec177ee2caa4bb0c6a975c09406b88ba51058

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.android.chrome.png

MD5 b84265c54c412dd2e36f9bcde3c418b1
SHA1 e7fa01bbe3ba56ff43604cc4f15c682d977b007a
SHA256 e18e0c0c75ef9fa5a5582da489c1fdc8175bb1a78ee58f1f497ec6865b74b445
SHA512 109c3eae6e8da1653de134ab55b74ff68d1d71bd9adfc8868d2085dfcb797d861c0f96b6f33463e287d4e2e57c342f2b4cd583490ae5c4f4a14cbc45f0f63513

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.android.contacts.png

MD5 73dee5ddf21050aaeab9a61303062997
SHA1 db1e885cfa5ffb85e3d270cf42836bbc6ec8c4a5
SHA256 fc20418e352d3a128e111dce2d59c4faf0a496d0fa78f8fbf1b7450dabdbbce3
SHA512 e3af4bcdb23405001eff65f6379d6ad4431e70e60b96bbc74191d62e90708ab6577b192275faf057e7a2ab93a5b20891aa588d2c8fec274022710b1eb1944712

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.android.dialer.png

MD5 4b3878202c11f5cb14a841169098822e
SHA1 4e6c661e078f544d4e6f491bd9c9c92ecc56208e
SHA256 96f9865f9be3f486213ff35d0b5a366c8e779dd403d273b95ad20e7f96201620
SHA512 06ebba506f12b9263cff03e68c6366a88986b8c389085dddf16da698fd71d74eb6144fa6a9b95ef8f6bf2e561b22c79600f2952605bdab3d15908943800b9421

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.apps.docs.png

MD5 5c59598106b0e7023f60939595c4846d
SHA1 b48ab140010f0635e16a14c8ab238afcf4b4f8b4
SHA256 1167933e4436c09924e2390ee665433e220a06c1295c511e76637cb1f5029d34
SHA512 dbb7b5d6dd9f71078625e9c07a832cf5c0b2b96b5554ca717d0137502b16cecb142c9a29d0012142bc01ca8d886a0b87e47684a3c853cd67e058f77ab98a9c73

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.apps.maps.png

MD5 65ba3d81c6d49280c344c94d6ab29c4d
SHA1 a7d0dae87979d0c56160f1770df45daec98f713c
SHA256 45847c78c9dacf13a574083cede31d500427d5854fd6410b323ccf93190bc073
SHA512 25270a4b816ba6c6ebd32c72484ecfd70795eaeb6ae63568534fa8fb7e87189b971056bdbc3fa61e0f03b02f2b38475734ed6832da0fadb6be310752ae4ffcea

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.apps.messaging.png

MD5 341ac5f482dbf5d538c0b21be2702257
SHA1 d4fb126a667cd986baa4372167f03b94e6fb8e4a
SHA256 8de170e10913cd7ea8b319a7aaaed5d2a7043f518f224e92923c88d2cfb88c79
SHA512 df2fe1491f628967726e8e1d8eff52ee203a88e9c7a41d868f0fac0f22bf7bc6e4f4b1521822d368324e7f4d43144121303f32ec1c195442be0a1f4a245d6596

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.apps.photos.png

MD5 d886b7861619611033150eb30cf978e6
SHA1 74703aefaed8ca02cb079be544520e0df24ee377
SHA256 e0979bc79921b8bf379c29bd1822dedf0d5c9d43e86ab4e5291b8f5cb0635051
SHA512 f6a3bff7909c178da0719c4d1a02dc4e8d2d2100d7a74979ca3b68aa96a67a93b9b42787f02f4979deeec8b01c496cea6a501e471b59d469b46ecb2bff4ee4d8

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.apps.youtube.music.png

MD5 6bf9f159a9c6ab045c74f5cb04ba7783
SHA1 22445edd97969fb65e8d32566e705a85009078be
SHA256 59b2d8f5d2eab3568c8b3b4a3868588ea62599b30dab5728112d4732c9aa1682
SHA512 3fd6fc7d885dd5929a3b77d8cff8b8d97a40d5ced0c7bbafda3f39243851effd2ae7081f8113bf4e8b864e944e343044a9b23e0b85e4067aa6048ad6b6fd2182

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.calendar.png

MD5 6a693683195fde005ae952837486ae97
SHA1 f0526e54cad06a4aaf448d3b9fd09ed9d0e16ad3
SHA256 0a32ede464ce76ebd07b140f04849e7ec3d4d81b4bb7d0b9faed8bc45951f983
SHA512 17db7d925b3992ab7511e6e5e11e67a4947ef82b85b16848f88ee1e6936976463795abc7e31b7b823ea41d7b941d930ac2c7a445046be71c28b976b2a564dbc4

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.deskclock.png

MD5 a2d016f70ab6ea4ef67ab85fc64af271
SHA1 9edf8f696067fa0ab17c6aaf365e6904dc44058d
SHA256 adda12bca34c8e860d1bc15ac191b60aff05edfc84667b6e0875af874006140b
SHA512 3968244d10741c2897a945b17ce2c1d79ee66ff3e5b50c207e358b12af533817d3bf3a5a351f0a7689b53fb05afc5b393b462007f0d6ee78b9f1bfd3924358f9

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.gm.png

MD5 76ac63e88265a8fc2553639f5f12b875
SHA1 42d9af1a712db070205b664480f83155fe4867c1
SHA256 6d02c65bb87ac051a3094efbcf5c9aad10cf7dbb5c3adec90b812bdb63f9ffba
SHA512 d856338085723c0de49a06e2a1f7dd68d350b0b49c9bb0d1e09dc5b5e3aec0350471594906427f72f741eb0224ef76b29fea9f3fbb32a4aafaf5fba919a26602

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.videos.png

MD5 c6ba2891d69eb12fbe0e58b7ac5b87d1
SHA1 8b4dafaeb96621379e1e951a6b728bf121e4b6af
SHA256 c7cdf2222e3232e406c62d6994b96cd7e85f9fe1c66d82d589fa77571326bb95
SHA512 0f47f52484b89fb041333efbde1b70ccb36bc61ed31b10b336496ab42c2e878b497062414585a4c0025a8bfed9c2a31aaa717f8c8d343fe0c8046706e135e646

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.youtube.png

MD5 54bc2d01c3ed0c0c09459b77280b066a
SHA1 33faa9f942d9bf08395aa04c2973671a8ed4e990
SHA256 398591505ffd2157fddd85e63e8f318f2aacb2a29d62b7ef75cf6ccb2df94a96
SHA512 546d176d8f1c0883f22d80a933af41313b78198484a117c4f324dd8aeb157f7db10cec3e7777c0f6fee797209be0a6cf61860a5184a7fd3396715577c92a9721

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.documentsui.png

MD5 1449ec00089e25c0dd89bfc71906c051
SHA1 2913d0a9d86fbd474af9c3cd6b93935154232e8c
SHA256 5f6b4732deba9dab4c74a06bc3ad427390585dc48176e6f5aad274d5c0345323
SHA512 3a1a19c9513c61d89f99f08c0458169a02456acae3af0e9dd73aa975cc8122a55f35b73542425854adbab765e5d7b31146dc35396af26ba3a431591f2365ed1e

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/com.google.android.googlequicksearchbox.png

MD5 559bf792cddc758c7c4f0a4d319b9101
SHA1 c4d489428342137ad05d600ce1b78747b8a0c117
SHA256 437b488aee878b4079921f358b9c2a6c7baa49ebd59bc87105867da61a0df507
SHA512 53b979d58eed375714cdfb208091c5d65ca54c1b60e13e4324f20af11927b396bdf93dfe5f8fba3b081235d3060addf2e14a4af0474eb977fe60474b83812f55

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/org.chromium.webview_shell.png

MD5 3f0814e86f7a0a6ed0a3515006f54e06
SHA1 fc870a130e8fae6f754edcb2f5b1ee9f5e641492
SHA256 85226c716349edababf3497e598c43f9bf7d4a79f128e9b1373cd4be8ac44695
SHA512 80afbc681e189865ee56394595b9fc6509e2687857f69af20a1002420bbdaa006662789818e49e85bdce921d910023b7c76a4b0748404e856973c5da42fc6616

/data/user/0/ph.mikedigicrafts.nslauncher/files/apps/UserName0Circle.png

MD5 8b7edf5c1aa447e95bca43428faf0381
SHA1 c5ef9aea753ba392fd0ec243aa67043250e0df34
SHA256 af971de55308e0ff0b69fcce39843c96fcc966a31441d0b7edf08257f92d98f9
SHA512 7218e9fe0655ee5a5c1f2f79a28255464f14e629ed43f3a02137b4e0c5567cd2e758b22c06ef26c00718cd1079fd4dade3057984c0771235f689449cc75f170a

/data/user/0/ph.mikedigicrafts.nslauncher/files/RecentListArray

MD5 61366718954e58fae52a7c5ac03e3639
SHA1 4e5cd1a31006966c0325af8f5c7e084525e8e947
SHA256 ac1a874c701734858f1ea03b291cbb406f9ac90e0d12d3a0aae3716777d7f88c
SHA512 79a22b39c75676e73f03e20e84b80f21e42a217b32613f249ca3be865640e90aea95327843b559bd74cab80bffc5eeda047c72ffca0a72614f7405bea6e7517b

/data/user/0/ph.mikedigicrafts.nslauncher/files/RecentListArray

MD5 12c2791f6b2272e59af61aafe063b1dd
SHA1 051c891371d27f1960d681751019b9f5a46eb234
SHA256 de70cac949d404d494e7c74075968d6721181a5eb7f0eea78d1920772a896a08
SHA512 60a2fa8677f9d185ed5d4b8b2a3767a40f12286a6fe68031b7e0de32762a2d7f87b9336014a7905190e0474be16969a91e4940eeacac8616e2b0f49050dd59e8

/data/user/0/ph.mikedigicrafts.nslauncher/cache/oat/1582435991586.jar.cur.prof

MD5 f9431a0cde5766b6a47fe517f0dbe91f
SHA1 41ebffb9e03db4e211961286e6c233726d1c704f
SHA256 48409024aacda3669e2112419ca8742dedca12f5310521730db60c8387710616
SHA512 3102a350b8cdbfe686564eb79892a609f3cccd74d4b420f831156b1c57b736853f1cba0988d4dea7bf728f341e3ed2b997274684726afa2d97d31115e5213382

/data/user/0/ph.mikedigicrafts.nslauncher/files/RecentListNameArray

MD5 c012e5f5ad03eaaa57b3424e528f16bc
SHA1 83219fadb0fdcf0fa0800bf35c4d690dfde98f7c
SHA256 3afa70509c2caf8e8675f5a21d86032760c54dee64afcb97b5c3ffec0afe8841
SHA512 bc518309a71042169f3aa265e2bd78ac90ded9f1e48b35475a16d823212f6bbda3c794829a0594cab1541f10f1d9bea5625018585138b7b8703a9484fb869346