File scan report
Verdict Safe
Is Niagara Launcher_ v1_ 16_ 20. apk safe? Yes, no threats found.
Two less reliable engines flagged a medium-prevalence Android launcher with no major support or malicious host evidence.
Read the whole reasonShow less
Moderate evidence · No engine flags it, but no publisher signature confirms who made it.
The file can be considered safe for installation from trusted sources; continue using standard Android security practices.
Good practice2 tips
We found nothing harmful in this file.
Install it only from Google Play or the developer's own website.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
2 of 66 flagged
- Flagged 2
- No detection 64
- No result 9
- Code signing Not applicable
- Test run Completed
- First seen 2mo ago
Chapter 02
Why we think so
1 point against it and 3 in its favour, checked against the scan evidence.
The reasoning behind this verdict
Only two less reliable detections exist against 75 engines, both generic unwanted program labels. Medium prevalence and absence of external-intel hits support a safe classification.
The engine pattern matches the less reliable-only false-positive shape: two detections, none from major antivirus engines, and no family consensus. Contacted-host reputation cross-check inspected two hosts and found none malicious. No sandbox data exists, so runtime claims cannot be asserted. Medium prevalence and zero external-intel hits further reduce risk.
What We Detected
Two less reliable engines (AhnLab-V3, TrellixENS) reported generic PUP/Android.Moda and Artemis labels. All 16 major antivirus engines remained silent. No code signing applies to Android APKs.
Threat Behavior
No sandbox execution occurred. The sample contacted 14 IP addresses, but our host-reputation cache shows none flagged malicious. No files it created or persistence indicators were recorded.
What To Do Now
Install from the official Niagara Launcher distribution channel and keep Android security updates enabled. Monitor for unusual battery or data usage after installation.
Where this verdict could be wrong1 caveat
- Direct-IP traffic to 14 addresses with no domain recorded could indicate a control server. No complete contacted-host reputation result was available.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- Zero malicious detections from major antivirus engines
- Medium prevalence across 283 sources
- no complete contacted-host reputation result was available in contacted-host cache
- Direct-IP traffic pattern (no domain recorded)
6 sources checked · 5 complete · 1 partial. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 4sandbox rule tags
- 0spawned processes
- 16network contacts
- 22filesystem & mutex artifacts
What this file did when executed
This file was run in a sandbox and its runtime behaviour was observed.
Techniques observed in the sandbox
4MITRE ATT&CK techniques the sandbox mapped. Highlighted ones are rare in normal software; the others are common in legitimate programs too.
- T1071· Application protocol
- T1426
- T1430
- T1573
Observed activity
Network contacts
1616 hosts, listed as 14 addresses, 2 links. Links show the host and path only.
- IP address
172.217.116.4 - IP address
104.21.17.246 - IP address
172.67.178.228 - IP address
142.251.156.119 - IP address
173.194.194.94 - IP address
173.194.193.138
Show all 16 entries for network contacts
- IP address
104.21.64.137 - IP address
173.194.206.106 - IP address
172.217.119.4 - IP address
172.217.114.4 - IP address
172.217.113.4 - IP address
173.194.193.113 - IP address
172.217.112.4 - IP address
173.194.193.95 - URL
https://firebaseinstallations.googleapis.com/v1/projects/launcher-id/installations - URL
https://firebaseremoteconfig.googleapis.com/v1/projects/112739013535/namespaces/firebase:fetch
Files
22Files the file created, changed or deleted.
- Written
/data/user/0/bitpit.launcher/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMTI3MzkwMTM1MzU6YW5kcm9pZDpmYWQ0MjEwZjRiMmZlMWY1.xml - Written
/data/user/0/bitpit.launcher/cache/media/2e8609309d0b3256.uid - Written
/data/user/0/bitpit.launcher/shared_prefs/bitpit.launcher_preferences.xml - Written
/data/user/0/bitpit.launcher/cache/apps_0.cdb - Written
/data/user/0/bitpit.launcher/shared_prefs/com.google.android.gms.measurement.prefs.xml - Written
/data/user/0/bitpit.launcher/cache/media/2/0.0.1785456529210.v3.exo
Show all 22 entries for files
- Written
/data/user/0/bitpit.launcher/cache/media/1/3.0.1785456529739.v3.exo - Written
/data/user/0/bitpit.launcher/cache/media/6/4.0.1785456530106.v3.exo - Written
/data/user/0/bitpit.launcher/cache/media/3/5.0.1785456530194.v3.exo - Written
/data/user/0/bitpit.launcher/cache/media/4/6.0.1785456530293.v3.exo - Written
/data/user/0/bitpit.launcher/cache/media/1/7.0.1785456530372.v3.exo - Written
/data/user/0/bitpit.launcher/cache/media/1/8.0.1785456530465.v3.exo - Written
/data/user/0/bitpit.launcher/cache/media/5/9.0.1785456530547.v3.exo - Written
/data/user/0/bitpit.launcher/cache/media/4/10.0.1785456530620.v3.exo - Written
/data/user/0/bitpit.launcher/cache/media/5/11.0.1785456530689.v3.exo - Deleted
/data/user/0/bitpit.launcher/shared_prefs/bitpit.launcher_preferences.xml.bak - Deleted
/data/user/0/bitpit.launcher/cache/cdb_4442788363087821926.tmp - Deleted
/data/user/0/bitpit.launcher/cache/apps_0.cdb - Deleted
/data/user/0/bitpit.launcher/shared_prefs/com.google.android.gms.measurement.prefs.xml.bak - Deleted
/data/user/0/bitpit.launcher/shared_prefs/com.google.firebase.crashlytics.xml.bak - Deleted
/data/user/0/bitpit.launcher/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MToxMTI3MzkwMTM1MzU6YW5kcm9pZDpmYWQ0MjEwZjRiMmZlMWY1.xml.bak - Deleted
/data/user/0/bitpit.launcher/shared_prefs/frc_1:112739013535:android:fad4210f4b2fe1f5_firebase_settings.xml.bak
Chapter 04
Technical details
2 of the 66 antivirus engines that checked it flag it.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 partial. Complete means the check returned a usable result; it does not mean the file is safe.
Engines that flagged it 2
The saved verdict treats these detections as likely false positives.
- TrellixENS (major engine)Artemis!1F82268CB474
- AhnLab-V3PUP/Android.Moda.1297228
File fingerprint
- Last analyzed
- Sep 7, 2026, 6:36 PM UTC
- SHA-256
fbb2b33429e70f7d8e221724825bd6e4579b21880ce550ec0ab464d5a0bb79e2- SHA-1
4b6805c54653fdbe7dd60d03a687122e1e1f78a6- MD5
1f82268cb4744bd20e6441d4e330f1a6
About this file
Niagara Launcher_v1_16_20.apk is an Android file of 14.2 MB.
- Type and size
- Android · 14.2 MB
- Signer
- Not applicable
- First seen
- Jul 31, 2026On VirusTotal.
- Submitted by
- 283 distinct sources
First scanned
Antivirus consensus
2 of 66 engines flagged this file
9 of the 75 engines returned no result for this file (file type not supported, or the scan did not finish), so they did not check it.
- Tier-117 engines1flagged
- Tier-237 engines0flagged
- Low-trust12 engines1flagged
View all 75 engine results
- AhnLab-V3Malicious: PUP/Android.Moda.1297228
- TrellixENSMalicious: Artemis!1F82268CB474
- AcronisClean
- AlibabaClean
- alibabacloudNo result
- ALYacClean
- Antiy-AVLClean
- APEXNo result
- ArcabitClean
- AvastClean
- Avast-MobileClean
- AVGClean
- AviraClean
- BitDefenderClean
- BitDefenderFalxClean
- BkavClean
- CAT-QuickHealClean
- ClamAVNo result
- CMCClean
- CrowdStrikeClean
- CTXClean
- CylanceNo result
- CynetClean
- DeepInstinctNo result
- DrWebClean
- ElasticClean
- EmsisoftClean
- ESET-NOD32Clean
- F-SecureClean
- FortinetClean
- GDataClean
- GoogleClean
- GridinsoftClean
- huorongClean
- IkarusNo result
- JiangminClean
- K7AntiVirusClean
- K7GWClean
- KasperskyClean
- KingsoftClean
- LionicClean
- MalwarebytesClean
- MaxSecureClean
- McAfeeDClean
- MicrosoftClean
- MicroWorld-eScanClean
- NANO-AntivirusClean
- PaloaltoNo result
- PandaClean
- RisingClean
- SangforClean
- SentinelOneClean
- SkyhighClean
- SophosClean
- SUPERAntiSpywareClean
- SymantecClean
- SymantecMobileInsightClean
- TACHYONClean
- tehtrisNo result
- TencentClean
- TrapmineNo result
- TrendMicroClean
- TrendMicro-HouseCallClean
- TrustlookClean
- VaristClean
- VBA32Clean
- VIPREClean
- VirITClean
- ViRobotClean
- WebrootClean
- XcitiumClean
- YandexClean
- ZillyaClean
- ZoneAlarmClean
- ZonerClean
How widely this file has been seen
Widely uploaded, but first seen within the last six months. No strong prior applies.
Chapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is Niagara Launcher_v1_16_20.apk safe?
What is Niagara Launcher_v1_16_20.apk?
How many antivirus engines detected Niagara Launcher_v1_16_20.apk?
What is the SHA-256 hash of Niagara Launcher_v1_16_20.apk?
Is it safe to install Niagara Launcher_v1_16_20.apk?
How up to date is this analysis of Niagara Launcher_v1_16_20.apk?
Community
Member reviews and reports for this exact file hash.