Analysis
- max time kernel
46s - max time network
152s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
22/05/2026, 16:07
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
P Launcher v9.2 (Premium).apk
Resource
android-x86-arm-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
P Launcher v9.2 (Premium).apk
Resource
android-x64-20260325-en
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
P Launcher v9.2 (Premium).apk
Resource
android-x64-arm64-20260325-en
8 signatures
150 seconds
General
- Target P Launcher v9.2 (Premium).apk
- Size 43.7MB
- Sample260522-tk35wsg14q
- SHA256 3424cd8a4a13309efb1ef9aeb75ee4af1d672ea46ce80c976e3774d9a35d4433
- MD5 2e8e411d23a322686ac5e47743e99cdc
- SHA1 572febe00b038b655765e61c3fb31c22011d391b
- SHA512 dd8ae9544cbf0641f50c5002714e5ea3a82dbaaec2f35b4365569f89b52300d9ac89c324afe232715ae8479c2264297d3425e6772dbdf4be0defe66d811cb079
- SSDEEP 786432:OR88LE3flSfx6zvq7SFpgLrfy8DTZ1ic/daKl7p5sUtsMLnNVmtGv0wAkeQpNOem:ORPLf8+2Hg/fpZ1B/sKl7XsUQ
- TLSH T105A7E062BB42AF22C47E973A6DFE535137321F89A743634B1015F26CEEF32C45A54A84
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.or.launcher.oreo - Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.or.launcher.oreo/files/audience_network.dex 4314 com.or.launcher.oreo /data/user/0/com.or.launcher.oreo/files/audience_network.dex 4396 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.or.launcher.oreo/files/audience_network.dex --output-vdex-fd=117 --oat-fd=118 --oat-location=/data/user/0/com.or.launcher.oreo/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.or.launcher.oreo/files/audience_network.dex 4314 com.or.launcher.oreo - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.or.launcher.oreo - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.or.launcher.oreo - Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.or.launcher.oreo - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.or.launcher.oreo - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.or.launcher.oreo
Processes
-
com.or.launcher.oreo1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4314 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.or.launcher.oreo/files/audience_network.dex --output-vdex-fd=117 --oat-fd=118 --oat-location=/data/user/0/com.or.launcher.oreo/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4396
-
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.or.launcher.oreo/cache/taboola_cache/journal.tmp
- Size 36B
- SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
- MD5 37e8e716e0e2f4a0b05cd9571d95b84d
- SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
- SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
- MD5 SHA1 SHA512
- Path /data/data/com.or.launcher.oreo/databases/app_icons.db
- Size 20KB
- SHA256 a4f4f3c415db389227e9b909ca295a622ccdad5912ddb85f4084240f0397bf70
- MD5 f97d4ef3c609daed28e7496d97ffbbfb
- SHA1 fcea34af86886eaa43278b0677eaf42c50c5625e
- SHA512 38acbc3cae1007855902903d0330401bc6807ec6ad418ad342cffcc1ad83908546478f357a51552ec6fe094fc9a74cf87c2ecd20d5e31c3510bf4978bb44bc94
- SSDEEP 12:TmnN2gtFO+4gE8YCrHNsgyUQmofBxDiRmBEyPbAVOw:TmBtF74B8YpgmDpx9GSE
- TLSH T11C92AC8D8B001313C22402F2E9E972973EBD231D5F02870238C100A8DCB3A06A7B1E9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/app_icons.db
- Size 116KB
- SHA256 e13cd04615e2dfd82a988f3940d9d7f4eec55b2261848dda1615caf3233db8d4
- MD5 06c7813207499cf6bff157c6f1829a87
- SHA1 1f2143b4625e69c2ac1915851192de9970b5cce0
- SHA512 8db010f7ffd6df9f5a2e28961aa451ef1e742c24a0a976a21fe3c0b314f45b816bf08f825378d3afebe5e4c88a1ddef3344f63b1a610bcc3aabdd859af703943
- SSDEEP 1536:ovzXdq9GU05x5Sh+ioGL1GkRf1eAJTJwqnFx0X+IDAMcJQbChbn:ovLw9qZS9AkbeCTJwGsAMmUChT
- TLSH T182C3E1E763749C3BE63C4B7F99386946FC70B1D41124B384671B9EAF296A504D0C0ADB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/app_icons.db-journal
- Size 512B
- SHA256 2b8bec927a334479172cf7e45cdcc2e94349052d82f74b2a3fb9672d1ac5ab9c
- MD5 66e51dbac3c87b66f69b7e38cd46df03
- SHA1 39fa0a53486a098e0b1429f357305e4c01c3cbdb
- SHA512 161e2a791677141310b2dbb910772690373965874641642a7e1f9f061a951c71ad178c0486168b1d2de9cc569adddce952127a045b8f47126c7a06e081e35ead
- MD5 SHA1 SHA512
- Path /data/data/com.or.launcher.oreo/databases/app_icons.db-wal
- Size 32KB
- SHA256 f25a61c69a629d317dba859d310dd7be3e29a56ed34fbd4e4214e969c231c811
- MD5 08c672285d4c2362c7f63a84102b1d65
- SHA1 cabfbb1a14ca6e6cddbc45235953ba969f74a394
- SHA512 719cb2e2925810e178d9a85c7a7f0b5542b2c207834df95986adeb5cb136e33dea3aa4c73e15afbbd29a4fdfa16db9f83e8e8708fa73aaa734ac80c4f2b187ce
- SSDEEP 24:KsOAzyGSP/FVdxQbmBtF74B8YpgmDpx9GSP/BI:3zNSP/Gm17DYpRxoSP/B
- TLSH T161E2D088B7881313C3156FB2B9D6674B3E7C631C8FA2CB03359101E4BC63648B5B1E8A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/app_icons.db-wal
- Size 418KB
- SHA256 2dcb5aaf3213cfb13497c7fb8a3249eef7c607c042c57d488787852a50bf02c2
- MD5 658045d1db858fd3f920cb17b6166231
- SHA1 a695702fd06ea677598ca763333b54d002ef03b6
- SHA512 60f31b70a356d9a142003d9fe6aec150ab4a1f886b301ff9dd862bdeb1581973fd7a29fe4134100f96200cdfea3036c69da39afdecb02ca3a12c79e6c56a52a5
- SSDEEP 1536:wXn0ywd5e9OA0yqwuh1U0uJkC61eZJTQw9wMnFx04CEDAb5LJjbvhbn:Zyc5e9MyqwKKkNeXTQw9wUrAb5lfvhT
- TLSH T170943ACBAF749623E13C8975AA7D2A833D7462C6222867E2B74E54EE7C27D0401D0DD7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/launcher.db
- Size 56KB
- SHA256 1fd81c864eb5bd5cf264359a276dbdf15f60c61393651522d79854df20bf7698
- MD5 038961156fd78dd85ea6bf709f9bae3f
- SHA1 db5d7988126c9b30618b5d89aed45fe153d41d7e
- SHA512 ebce810f2c98f6476a208d0b1608fa9f980efd47cdd7cc73e2458a7ac99e6fad3fd39acf3fd6de3185b5c41c4718a77d44846289cd1de6107e72d45ced6f090a
- SSDEEP 384:3BuyomBHT8dpy6PB8wauRObkA4HJsEdmK0pGwWoI:3BuSBz8dw6XaOO4/5wGwWT
- TLSH T125432B4A327E1027DA7D923975AD68BB3F7038F844F53AC144169CAC1EDBF8820D6B85
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/launcher.db-journal
- Size 512B
- SHA256 b577b1edc48dd6244d5f3c5d90575ffe69ffc00aa5293423d9d5deafd0213618
- MD5 13e48b0c0fe0b5dc43be8d3bdb9fd877
- SHA1 528234582d538445f57d9b25cb403905064ef6ed
- SHA512 5c5679fff7da47f37ff6fad4927c589175ba88ec42b6c9d51af7d4049e765f8a62b13dbe7076fa2e86d18d80988d712d2b8ab479dfb679e39769a61c9cc6bae9
- MD5 SHA1 SHA512
- Path /data/data/com.or.launcher.oreo/databases/launcher.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.or.launcher.oreo/databases/launcher.db-wal
- Size 402KB
- SHA256 bdf44e0cbd71322c1e369caa428b66a5ef2a4e074477578a88ce2c852a267e5e
- MD5 c9aa32b196d73826c1faf1f77326982f
- SHA1 0b673a1a559acb916f7c8a668dd72418399fa7a3
- SHA512 65768af1dbca013bfcfafd16841647e19e1f48d409e9f2d9bb14d862a6d5c0a53691ac8d8b0073e4a8b6204277f616c10fc5f47c0d6f40aefe69e77713fe6b45
- SSDEEP 1536:NtaV6V6B2CSBz8jJSBz8mGO56oOo8CK//apQOApZiUhISBz8I6qO0Ci:N8V6YB2C6eJ6b3JK33hI6h
- TLSH T16E94C80933BD112ADA3D923974AD78AA3F7034F944F63AC159169CAC1ED7F8820D6BC5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/sort_favorite.db-journal
- Size 512B
- SHA256 5c8c1785526ea5454d9e25521edc5475fce912a37f05731280eb71eb5106c8ae
- MD5 74e63c2b6abb0c94519ddd8d0c150e83
- SHA1 304fc964434e25761bda3ed04497ec2c0510ba0b
- SHA512 9d5b8d00ae4a13f287e4c86d67b37b778fcaa8aeea3bae507c049ce7b179c4c305b2059c34ea335a68cddabd3696923271ac3f66e0e10044026e1cdf1b7ee0be
- MD5 SHA1 SHA512
- Path /data/data/com.or.launcher.oreo/databases/sort_favorite.db-wal
- Size 36KB
- SHA256 777e93825fe186080882599ca1c0208d7fdeec3861cae7a067c71dcb9f97ece4
- MD5 eb6d5acab31d0d4b4ca1e3b852249b9d
- SHA1 2d2c3aa95a8e6bdb821c9b7affec740562d4a92d
- SHA512 55241064fe2ce2c036ea1c6943737d55bb57d7613d639501abf97fd106033f9552ea238698e60d917da3dabdd3e8b7dd862a3a8eb576366268f54556d16f760c
- SSDEEP 24:KqzyGSP/vhoswUwm2+QW7EW00GSP/ql8:rzNSP/Jo0wr+Qe0DSP/qm
- TLSH T102F2CE4E5740159BD5C8137669B5D3932FE4A30BDBC2CB432A7258F35E939C9B1B8E08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/ua.db
- Size 40KB
- SHA256 03e7d9dcd2b7ea5066145c3a37485fc33feab17179295b1c1143b16485d70129
- MD5 e5ae1f4a3f2a23c1120aded106002d77
- SHA1 903acfbecd8dd30a2113c6fdee72fda7fddb551a
- SHA512 ecd64144a9a911eba016be43be49150d91dc8358620f07360aca939576d028a04fea78cf07c9097797c49fd444d6d28ff798f88f995216602c5fcbe578135c3f
- SSDEEP 24:TTqRrL4PDiP/b+cLglJWcKbEGSvgiROdZmkF9e03:TGpwDeT+EsebTSHOdZm/i
- TLSH T12E0331D6730827A5C60C4237E857D2211A7C1D1D56DE87B727F004C3BDA3600A43CDAD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/ua.db
- Size 24KB
- SHA256 9bf7abc4895930ca955d973935710279e66fc592bad72238f63f073043a91112
- MD5 833013a2481518821566a000ff3a38d3
- SHA1 8882af9b9a1b23cac1347d9f00ba354880236fd2
- SHA512 aabec7c84a568ac61a0d928c595605d35610b9b3cf96ec5da35d11443d0243a4aac49eb84b94216ffc2f54c972675bf9fbfc319d4ff6446b19740fa9b9f6acab
- SSDEEP 3:pqYtX2QImmqUJcUSRLXmyhUjV/t5kt/UqUJcUSRLXmaqTq+GT0:pqQjxbpXmyq/LktlbpXmah+GQ
- TLSH T190B28CEC8BB0182BC6C218F8CB0A87F38854233C2E28005A0A7345615EEC8031C320EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/ua.db
- Size 32KB
- SHA256 747995cbb18555c38b3b9c08225951d1434e1c363ca51eefb88a6d96aa2995e3
- MD5 6d456a535b2c8ebb24551876408d1c06
- SHA1 cb2908665b62f177ef46107c857c5f061747fa92
- SHA512 a65ae3d456009631377f026bbe4c8de80a80dde736ce6fd446255b6fbe844e9840bfd0e6a7f859c1fd8eff8ca17664af8357c5075bebd6deaeccf810002a0cf1
- SSDEEP 3:rqAqP46Zs6jGThmfHRgfqUJcUSRLXmyhUjV/t5kt/UqUJcUSRLXmR:rqRP4H0G8H3bpXmyq/LktlbpXmR
- TLSH T16BE28CEC0BB92906CFC10CF5CB0B43B34928072C2E38948A867308524EB85436E321FF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/ua.db
- Size 36KB
- SHA256 6f718f74b30a7ed0f75b821ab74baa6766bb96a99fe88532ed1b33c7cc4143dc
- MD5 85f5f3b10ab4b89b7a7d5aa4f32de3ea
- SHA1 61d4221238dd525b4feec2f7894545105a6a67e6
- SHA512 1f7f8ab27ce0c122e2901a9eb3cc1c8eaec962936454acec640a88afa7ede673303893b0a8fe000dd53d669214b9a6aabd45c9911420f0dca44cac0ea2d447fe
- SSDEEP 6:pntPe3bpXmlIKBivSNe3dtjwE/dGaTTsSBuWpg02G3BJIy2/0L9P2fWy+39RXL:1ImlRiVdZF8kq//w9P2Oy+337
- TLSH T1D0F2F12C5F02AF03CD148AF9360AD1265818036C0106D1E7337059031E2101B0515A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/ua.db
- Size 36KB
- SHA256 9d97ea2eb1c48cf27c19eba975fc50db2d6b5b002b29cd730f4266276ecca85d
- MD5 0b49eaf77879b44cf426529801a858ce
- SHA1 b3479a705a106d2625ccb1e508b513594a30de22
- SHA512 b1291428cd42fa1e892c8e8cf056e048fe1362c914d195275204179495f08ab8220a81b2a091537740558e36240439ce5112c11f39d52182134d363e37e60267
- SSDEEP 12:yT0SzfAmYXSBJDSGVWIrcfP2mlRiVdZF8kq//w9P2Oy+337:w0iYXSBhSO8BlROdZmkF9e037
- TLSH T10FF2D3A8CB135F0BCE454BF6B50DD2525828522D8925E1D7B37959431F210578E146B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/ua.db-journal
- Size 512B
- SHA256 7383f5b507654f78cca46febaced9f194d6bd4949f454b32f12807f3cb626941
- MD5 029645a0e7fa3d8a45eaf6c5979aaba0
- SHA1 9e5d9086a6afd201e9adcb3126433a8d25bd08ba
- SHA512 793cb89c1cf06ccc8319afbe9b5d7b2148503a9741b4149a7d6eadccd31edb2f31f3bede979c7380fdc806323ce141cbef5bf46635562f9dd21142b6e190e2c4
- MD5 SHA1 SHA512
- Path /data/data/com.or.launcher.oreo/databases/ua.db-wal
- Size 60KB
- SHA256 354ad5930743928baf677cada26b888f1eff2324abefa4faec428f9ef35452c1
- MD5 1da83ea2267fee6ea2d32c0d0b0bc369
- SHA1 7466d9d82ae203351c200814a1ee121673da68b5
- SHA512 f6614eb448baeeb98bb3097611e26468ae2f48f6d4ee6ad248242bb4a34cc01dfdf625c3646e8c9ab3d92fdf8e2515e09990b84e42b27f2585a87b2379cdba30
- SSDEEP 48:ZZ8zNSP/nQGpwDeT+EsebTSP/2n7H6bOdZm/i7:ZC0PPFpwyiERbWPunVV
- TLSH T1B453EBD5B71D2757C31C4336E89B92112A789B5D82AA8FBF27B40496FC53B04A42CF6C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/ua.db-wal
- Size 12KB
- SHA256 4261aad168c7955fb8ae36401e4b90a63050266381b1e755e6ff93b327810e4c
- MD5 cbff8c30f203c080f9044d60997a55a7
- SHA1 2a4f9a7f2780ceaf86715d4e790ecae22c1c58a9
- SHA512 d1d1a3adfdeb0ca0207715a34c2f84254e32c7b6f487fa14615b7a52c8373c999fd5e3a985d8d00bbbf1c5fa8e53eeb69405e9333d014678cf83e2be8c3599d4
- SSDEEP 6:KOVTwMhuuQjxbpXmyq1otmZFFktlbpXmBPnh+GQ:KwWjXmyEo4FcmBPnh+GQ
- TLSH T1B842A7FCCFF04567CBC6D8F4CB6A43938434232C7914445B467A48615DEE9072DB649E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/ua.db-wal
- Size 12KB
- SHA256 6e150e7cc43d09722129198c243272adfa245df611634d2feee056d889ea9d51
- MD5 02324c2f346babf15491d6503ddb24ec
- SHA1 ff4117f4d8febcf781e6df2f3b4f93a344426a98
- SHA512 41210f2d6d92c10221ccdb09e5caca5ba327c9531bb63b109bb699a1bda90d8d7d7970c1bfc5fab6495927f3efce70d48a3a3f26e40e4aff77e0a2698aa09820
- SSDEEP 6:KUM2ULU2XjP4H0Gwi2iAH3bpXmyq1O3rktlbpXmR:KUM292Xe0Gwi2DmyEGcmR
- TLSH T1A1422BDC77B41122C6C70CF04E0913DA346852285F1C1887013524011D64C431E300AF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/ua.db-wal
- Size 4KB
- SHA256 d1cc16b4aa3996f0d8031ab6d40ad63afbce35b36bcaba566088496aaa3f3aa9
- MD5 bf87c7bc01579d8959bbb3bf0a1f7190
- SHA1 78209a7a7233084d7239d958532a5abad050d2ec
- SHA512 89f04047fefc47e0e09e1d6840bbba1479e2d0428c924164bf86202eb2b69e9bf3a6a66b9495418073a59f53311f2d0d97de9efd273f21a04f9dedcbd0c421e1
- SSDEEP 6:Kksu+evpntPe3bpXmlIKBivSNe3dtjwE/dGaTTsSBuWpg02G3BJIy2/0L9P2fWyM:KlCnImlRiVdZF8kq//w9P2Oy+337
- TLSH T18281232C5F02AF02CD3986F5310AD1324814071C0105D2E773B059231EA601B6405B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/ua.db-wal
- Size 8KB
- SHA256 372ff4204ae14b95a7c6598772dd04273650fd8c5fe82d9d24985868784f9252
- MD5 30e302eead7aa9ecacfdfc2068b25db4
- SHA1 0018b120f009f68ae4c0eceff89d876187943490
- SHA512 53686bd55a6b4be3b709c13437f122ec430d8165b300fd6b84a5882dde8bd4268b75733f8798c3951e340fb34bd7a4f0ff109cc3a4f7b957133e558c371697b0
- SSDEEP 12:KIFxJT0GPIotwzfAmYXSBJDSGVWIrcfP2mlRiVdZF8kq//w9P2Oy+337:KIFxx0GMYXSBhSO8BlROdZmkF9e037
- TLSH T10A0244648B135F2BC9410BF6750DE2526839222D8524E1DBB3BA59431F311278E147BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/databases/widgetpreviews.db-journal
- Size 512B
- SHA256 3250a8342fb682a5db21599ce69fb661992c559c8a272d327f1c060a58b0c0f3
- MD5 e8dd121ed3eae7c6df6ea223fb64337b
- SHA1 1b39c5111683d338254ffb68157b9be977cd154e
- SHA512 581cdd5fe35db901bbf53aa6892751e1a1ca8076437914d83a7e9a406fd63e34257fa577b569eefc9353895418fb32fe8584d348dabc3ae0b9f61b3b5d8d9387
- MD5 SHA1 SHA512
- Path /data/data/com.or.launcher.oreo/databases/widgetpreviews.db-wal
- Size 32KB
- SHA256 6d5700d51f88dd135809f6469bcd0f25e8be7c3b3c721a0adc75ee9b74addc65
- MD5 83ce68e097d315d38fb80d9534eff57a
- SHA1 74b8f09653a3cc6e6bdd598c9012f19c448a7c1a
- SHA512 26444b8c03bdf37ba16516306965d51302def77da5069627ef9ef723e300ff278a0b693032524ca3586e1a9e4c7bc15b60c12e794f67b4d478948b97b43c64bc
- SSDEEP 48:bfPzNSP/ukJMgCCc/7F7BrYegPmSP/uf:bfb0PmkegCCGpFGDPmf
- TLSH T1F9E2AFADDB011207C01F9276ACD0A3822DBD325D8363CF039DA0259C7D1B78975A5ECA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/files/audience_network.dex
- Size 4.8MB
- SHA256 07fef7ea41d84ccf44ef2e2a6de8d23e3d3dd5920c87979a1d501a9cb6272496
- MD5 b7744a43c71503ccd3ac5a95a884f434
- SHA1 9fbba7c0ff5daeb78e0022477942cf3aed0b97e1
- SHA512 a7ae440aba08cfa68306846cae284d7a57e03fcc0a11c36959ff15b2d7eb29136e7930cca16d2f14d6ea325107c44b2f989a3b9d17753b2d1472921a9a1f490f
- SSDEEP 49152:odcB+/KiheDdqzdDGTCglMdgnDR/18R0lBv+GZExSz6Tfwz81:f5K6f8WlNTZEqz81
- TLSH T10B367C1BF961AD22EAEC927FADAF47013B386945964357072190E775EC830EE4EC67C0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/files/oat/audience_network.dex.cur.prof
- Size 747B
- SHA256 e4b72793275c74af509d80dd193fdddc957b737eb1ce5a02f4e8e23aa6421b53
- MD5 a9c8e0414c49cb176c0eb1878e55453a
- SHA1 b735735ae62a370359300f746e8c598b68cd5e9c
- SHA512 3e16126e6a92712f431ea1ee3c942cb8a2b3dceb261010bedbe368a9fffd88ed18a6bade4d67eda0f8c7a31abb4c21d8f02c3b04459a0fc177d58e2418215004
- TLSH T13B01BA5C051C617769605D411243C3BB6387E71F274DC23DF1EC63A44C7C120EE9942C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.or.launcher.oreo/files/profileInstalled
- Size 24B
- SHA256 0e48ff08117d47845d511c267e571da3a7322881608ac00aa63dfed95f793653
- MD5 0ca6f265b91e5428dc6e31382466b226
- SHA1 760458bbd48554cfbb730387befa961a0ba48f66
- SHA512 523647848efe99ca65ee3bb7dd3556dbc4bf1469907df53f75215cf85fad6c8c98bb0ce1c47065c7ab45ee841b4d292c77a30051a6df0ee67126119ea5fd8c43
- MD5 SHA1 SHA512
- Path /data/data/com.or.launcher.oreo/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 176e6fd1cf45d2b18244faba44cdae302c67246620910438fa59ff9a2b9a1eb6
- MD5 52e0a85ebd20eea46148eed8b76f7b1f
- SHA1 43f0492a33cec1283451b42a360eebd6af0008cc
- SHA512 fd0b89640319ae7f338bf76a5cd1555aa716ec5da1c4e75e54de50f56e3d1462b9a66c9f8a6ae0e12270d12d466a1a5213d9c4b11d5a24d8720e98cb2bc4b0b7
- MD5 SHA1 SHA512
- Path /data/data/com.or.launcher.oreo/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.or.launcher.oreo/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 b25f2b9c3240dc40a7d1c50afb1ce3421128139ced97d542f4428bef2d7bc4f6
- MD5 c138337abcd3055b763555e5a0ba4b8d
- SHA1 898e605020f00a18eefa45fd9f37e22a3a45d9a5
- SHA512 f5d355327dca0dc331fb9314dd95d7b13801672912e32629a12b2d2068badcf0bc2d9f5297f5029df1854b58e7246432f5c60586898a53aade26cf8844774895
- MD5 SHA1 SHA512
- Path /data/data/com.or.launcher.oreo/no_backup/androidx.work.workdb-wal
- Size 108KB
- SHA256 864b8d4ade63d54c3f853776a8ac0a74a7f01fe88bc151badcfdd54f64b7b55a
- MD5 12bcf6da6feccd6b961a927dfe487be9
- SHA1 2898c7022f7860cb64a29c081f29c080b2dcf6cd
- SHA512 ac839c9bcaae6e72e9260278a143b9aa33320e90633afe761561d9689dd723cea7b391c684e1b60c9aeb6ecb1efded387e81622d873a4ed8eb2f00065f416475
- SSDEEP 96:5Q6+hdjnHtDRMpf8UzS6+BD8q0ExPmM8IW/qgJsvcAAsWEkjkPtvTh/L:GdjnHt9Mpf8UzS6+BD8q0E5wf2
- TLSH T144B3344E0F792510C499A4F1A4900FF2793E469EC7A3E3E166914075ADCAD31DD29CF7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.or.launcher.oreo/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 685d8e643923fe71cc932bda02b9c6a56a1e4de2fb3b8d12af28d59fb014d228
- MD5 b89f9a98442afe53208713776c09227d
- SHA1 e5852c3001f0eebf2b3dd804c1adfef8382a807f
- SHA512 7d33b04ffb639984ab6878ae612a9c932593968b2441e4fe097c0c0c03f79478050afac4df5a7e3e27e7332cd4eb4d62c31cfca71d24beb86cc8aad1037e9840
- SSDEEP 6:K+t/S7lb/UweWg9FZdrlOERX4PBX4ogLugMBX4suuK+/6/oKCc/TOw2:KE/elb/rUzdTRmBEyPbP/6/oTc/TOw2
- TLSH T14272C2A8D3F009B2C518537350CA83D31D6063C95273D74B93610C516C4ABCC6C61D89
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.or.launcher.oreo/primary.prof
- Size 4KB
- SHA256 b0021ecf6b6ea9421dc00ececa3e9cd1739956200cae4e745198c14c73e73a4c
- MD5 0138e02a5b82d19122cf8659bdb9bca8
- SHA1 d01f3a0c428ba78055f8845a50fb3dd3ad78290a
- SHA512 4b076b345ddba35979f00973ed238d3c516bbe02cd1fc36d5546dae3c27b414d107698c0fbed9005d05ab8632b7b85626988a3b1be6418f5cee94625389a9e2a
- SSDEEP 96:vukDy2R6OPlCjx4k+ebaudRpCoffPeSnbazSeZI4XpcP:vlR6OdCl4klbjRpCofXeSbESeqii
- TLSH T1E6A17D82B9C0201DD5B5BBD348302056F855732C3283BA203BE10BC66FE0856EED5628
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.or.launcher.oreo/primary.prof
- Size 14KB
- SHA256 5727662aa749ee5a63ec56a08d54dbf044a1f4ceb312921f5f289ef6c6fad045
- MD5 f88fa0f501adaeb78919a1eb8cc4bf01
- SHA1 d448670398e88b79f6d68955aa4ffabaa94c8bf4
- SHA512 60ea56b51aa793d603c54c97bbf9a7743311df8950d22bc0ecf6a0e512eebb1aba3822b6f84d4b468a1a69af137abc7a9ca23246d92524f39c7a4679ed0bcc2d
- SSDEEP 384:PaFIomIbN+SgmAfqQXUgZ69HoIcxr/v6qKdM3UKqTWnmK:PaFIopxAil9HotX6qKa3UTCX
- TLSH T17D62C02B9742F6CBC9A647FDED504933D92CC9824B98A483FE01C8C6749E96751F09A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.or.launcher.oreo/files/audience_network.dex
- Size 4.8MB
- SHA256 e67f1ae9225ff68ff50281fc6b85cdda58f33ea30b208072dda49e0dd673bed8
- MD5 c9f98ed97265ec352fa38f0781e608ba
- SHA1 39d5ef213b3207141f523b36918bf6c2f5a77463
- SHA512 80c880a6a33d624e1ed989c9012809974cc7a4bf112211b3addb904575d0a23207e5e985a4508d799c17c34676477138d3ff5eeefa5a1f1ab5313c118de297c7
- SSDEEP 49152:odcB+/KiheDdqzdDGTCglMdnbDWAET8euGZExSz6Tfwz81:f5KM34eDZEqz81
- TLSH T19C367C1AF9216D23EA6C83779DAB4745673A60065A0387072680E375FCC71EE8FDA7C4
- MD5 SHA1 SHA512 SSDEEP TLSH