01edb1738802e78c4710652659848a5475ca795076c1b1fee2e799e386a278c1

Analysis

max time kernel
221340s
max time network
161s
platform
android_x86
resource
android-x86-arm-20230831-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
submitted
07/10/2023, 23:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

252f87c3296807622d5b283fe4fdcf3ccb0cfd785c0fe68d48329587591a7a80.apk
Size

59.7MB
MD5

01b19cc2b36acf72cc29565979fcf3e0
SHA1

37e71f078967dd3d951f8fe64ca6dd578da1ad02
SHA256

cab4858d04064f21867f82a44fef98047e267c28914077591699fbe1188a299c
SHA512

a5eeff15a8a6dbcc76d43812fb5510f5a8aebaf1f6260515fc136e781848b2c8506259eb5832a30ccbaa7d6ad05dca434bcb492960c227b1b56c71eeaf1ec99d
SSDEEP

1572864:dJFaa2GXVtgttj7RFgCABT8zFqxx9I1Agah/GxX7LyXPdVjK2CSFBgNypM:dJFaa2WVtgfjtF6Azox+A/Gx3qdVmAO/

Score

8^/10

banker evasion ransomware

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.slots.ysl.task

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.slots.ysl.task

Checks Android system properties for emulator presence. 1 IoCs

description	ioc	Process
Accessed system property	key: ro.hardware	com.slots.ysl.task

Loads dropped Dex/Jar 8 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex	4229	dex2oat --runtime-arg -classpath --runtime-arg & --dex-file=/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex --oat-file=/data/user/0/com.slots.ysl.task/module/opt/data@[email protected]__10051119.dex --instruction-set=x86 --compiler-filter=quicken
/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex	4179	com.slots.ysl.task
/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex	4263	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/oat/x86/base.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex	4179	com.slots.ysl.task
/data/user/0/com.slots.ysl.task/cache/pf.dex	4290	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.slots.ysl.task/cache/pf.dex --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.slots.ysl.task/cache/oat/x86/pf.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.slots.ysl.task/cache/pf.dex	4179	com.slots.ysl.task
Anonymous-DexFile@0xd9270000-0xd9272cbc	4179	com.slots.ysl.task
Anonymous-DexFile@0xcb468000-0xcb46d064	4179	com.slots.ysl.task

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.slots.ysl.task

Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

evasion

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.slots.ysl.task

com.slots.ysl.task
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Acquires the wake lock.
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
- Listens for changes in the sensor environment (might be used to detect emulation).
PID:4179
- dex2oat --runtime-arg -classpath --runtime-arg & --dex-file=/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex --oat-file=/data/user/0/com.slots.ysl.task/module/opt/data@[email protected]__10051119.dex --instruction-set=x86 --compiler-filter=quicken
  2⤵
  - Loads dropped Dex/Jar
  PID:4229
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/oat/x86/base.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4263
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.slots.ysl.task/cache/pf.dex --output-vdex-fd=47 --oat-fd=48 --oat-location=/data/user/0/com.slots.ysl.task/cache/oat/x86/pf.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4290

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.slots.ysl.task/cache/pf.dex

Filesize
3.7MB

MD5
44c10605c096896948caba2a107340b6

SHA1
949835165e5a53d92850398ca0b437f05440a909

SHA256
ace55afd0960ec01319a78361c440bf6b4a985db0451bb164717546ba1374d20

SHA512
84c658bab25730970630fac8c7c17f4a40a33aeaa8402d549a729b18839e20b0a058081d85830348188ed7f002db8711f3e7bd7283190821498f9135c0544779

Download Submit
/data/data/com.slots.ysl.task/databases/__mqttAndroidService.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.slots.ysl.task/databases/__mqttAndroidService.db-journal

Filesize
512B

MD5
b936d5c7c8bab2c1ba5ea4064677d422

SHA1
8836d8e43ce54a088cf55f0d71b4dc19766b95c4

SHA256
7271a7d64fb609737c380cd143cbf9f33618bf1dd452109b6e848d07c6621799

SHA512
32e700fd35ace4d0d24b58eb2cf10de44f8f4dcdcf0249970347bf692d2febbcef121449c85e5786d629b6e595ee391e2d264c8631eaab640d26dec75b877ac9

Download Submit
/data/data/com.slots.ysl.task/databases/__mqttAndroidService.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.slots.ysl.task/databases/__mqttAndroidService.db-wal

Filesize
32KB

MD5
b047131d2d278521a235760e128cce45

SHA1
1dceb3c7370667e46802c49e3c27c2b933814983

SHA256
af6f4769e21bdde31274a90192a70f9c9f02bfa82e4f4ef774c5517cf654f591

SHA512
57a6d750730545da314a8a550073634199c6d93ff75cac9c0c44bd0e3ebb7c3378b4910ed6fd29ef8b798eb5abcf84e784064cc4e42aed83624ae114eb5bd98e

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f954f1f9d9da013f5616a804b84c50d6

SHA1
5e06676102fa119315729ecf0ce21ca58bb34137

SHA256
731c75604c54c91c74bd54ed54df9a13485815eb3a9856bda796d3413fa800ef

SHA512
b1af06198e62f62a708a801c6905c68b3056476f390f609bfd9ac6410bf4c2362c4ab59453662de4fd4c3fa0ea28efb14fc8d93332f368817346bbdfe3b29c5e

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5033ef12f304b076ec9913ef00837783

SHA1
96be2398ed22c9135aa73995177980fbed70737f

SHA256
25651aa9ef07cf440a5dd2477dfe1cef4e937fbb0ef15758f220885428eb4d81

SHA512
5e266779d2b9a55051f0a1d86cf87961e09b5e32a2f903ff5d19dd5c096addc74c21e77f5d2ef8fb89c103d3f30833d4f4f7156f42d87fe66873df624679b720

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db

Filesize
16KB

MD5
58252fd8b193a7d9de8b7a9e13746fd1

SHA1
5693fa3f92e140eb470e3156a53722a195a02014

SHA256
f8afd4adb9884dfcebee86c498b505dec7733db344691ed18783f9e65be59b27

SHA512
1913c0feaa815beaba0c05648cb3b2b47a75ff81969ce56271b7a08e62360cf5d8eeb6eba3dc5a97050c70fa113906b551a888604b101218d17213b6e8dae40b

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8c5baf369230a7d346709653b7eafcdc

SHA1
7bee40fc92f8c6f56682b35878f29378c7aab727

SHA256
46a8d4d59de0815e6f8135be50d2d8975d3e533cbaeddd8f6f1c6b5fae0d313f

SHA512
ab976c93909b9a8bb0f13b62fcf27d067d5346ae7bfa900329ebc0561831253ffc04b98e2ebc8a26984c9959448d96d5593f3914404031c99459020743a89901

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2134746975db8dcacd62064d5668a0e9

SHA1
34cd33af0a497ae3dd2e5697677650157b0e9bb6

SHA256
c17f949a6ece5e37cdbca40de341219d77f284674b64fcdf74e08f7b834220ae

SHA512
6e6101a622b0b7f24fd7e71c60acec7b30335eaa2bba9c3ae0ae49f10dd3a505222680bb8c975cee6346a0677c9a20675dd5639948aec83444f8768e5d7e744a

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
d4256bc63d2d0e22f624960e1de86854

SHA1
46fbd8f7759cfc5e7051054dfdf4df420f76eab4

SHA256
d043df0fa5c6ef5cbf2a6ed69a0eed480db7955e0f1f2d5cdff0bfbee16aaa5a

SHA512
a563866c308de45795f3e51bcc4b1eecdcc556fa4e3807fcf27d552f74567f993b8c2fa6ad483a6989c606f36eca2c7ee97515ecff7e03071982fecb615bed79

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
005aff058f34e423fdb584294a920a3f

SHA1
9d76befdeabbf5ffd4d319704ae986f3e160b63a

SHA256
4ef6ae9004c4f676b1df908b9b7f37853848777677a039c1840bc067e0810339

SHA512
e822ad177845497a8e74bf7dc28a09474f7dfa9b8c3400ad96340f8a9d0efa18902d54107e224b58a5bc322248bebba331231607a3db1aa1a25c31141ffea5bb

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
4d234836e42b55bda6b616eb92962fbe

SHA1
2d733ef6cdeb304599fa7ca96cbc4ca891e32b61

SHA256
54b34820b6fbe9c18b9a9cdd19fc0b68fd7e08529d0abc508691a1b840b5dbc4

SHA512
bc8607e186c562a821876ed71faffc1114087a0c26ca4bd89e5593f2a4447b0baf7a27114c19f1c3ecde3788a8b8311f875dd539adbe0bd5f9f2318ec7fe77a7

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e5231cae43e4ad27177cf438c782fce9

SHA1
f1be717c4a36b7ad4238553a569d7198471db427

SHA256
69bf0baa753c4c23fdf73cf958ac7e709b2940a280c278059c486f63ba03ec52

SHA512
0e37ff524dee5a443c6da3bf4d6dd6f38c2b8c61c34460d70a72f4bb97880062285ec169ef8fe0ac19fe572799e3da2eb45ba7809c98eccc4e926dbaf4d6459e

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
431928a24d72799ce80e523d83ca851f

SHA1
bd01ebcdd77c43d479c45f0b916d535bcbc27793

SHA256
087e8a2812329f9e5dd33895eb7aec551f05a77d54c17e8fcec52f86ae4efef9

SHA512
b097a1f27e8bf611d216a93f46c619fe959e9b7014c96470e43e9df2fafc365d4ede0b2b3a7ab5ecfc5f06de8f0b894893afafba57b4e2e4afc4d8c11484c870

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8196e2bd0b5747258733e55e9d34a3d1

SHA1
2746b09c4b3991d1b318a099eff5068e9edfa5a8

SHA256
fd1ce2fdc8f2883ec0fc32fd5d66b7df4a7262467bd86e83271c4df0e96f935e

SHA512
ac9049a9da83cae8af75dc9daa9ab9123aa62c3cf9b978a9bb785a6ed217599762b0b12684c831292a15228927461e3446be5ed0572b833f773654104d57a916

Download Submit
/data/data/com.slots.ysl.task/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
b074ebb199575582624d31c8a12c4e4c

SHA1
c18bde7c42c36036ea155df4096d2363c07b940d

SHA256
525d91ec0eab941d367c60f0a16035c631061df650f4e961342b0b84f1c50979

SHA512
a9a5fd10d2bd5254d9fa245138ebd8325ff1bf64c6cda335343aa793fefd002a9f35fa8e039939791da5d7383e4d85ba16a7afe3bb61731f79609523aa9596f3

Download Submit
/data/data/com.slots.ysl.task/files/AdjustAttribution

Filesize
444B

MD5
7d1ccf8d0e6e7424222b02b26171e612

SHA1
b92d0b3c998be926798fd87bfc8a021b4d22f4ec

SHA256
9c7dfd308951e64a7fbfd6975f641e8140b7fcf1ccd5f0fbb8954774fa7d071a

SHA512
1dc41fcdb2d9c9145a9c4479f5f6abc5d7f2c647c0e78b8e348e921aa8f3107956550fb051a3f8c4d6d4395cafa9cdfa490e3e5dcb4981705f766256f2654c03

Download Submit
/data/data/com.slots.ysl.task/files/AdjustIoActivityState

Filesize
746B

MD5
cf2f894b6415d75f83802437435f98f1

SHA1
69bfc306c34013114f40a3571dc4974c7eafe5b0

SHA256
9f73351f84ca0bfa9343dfc3c97f3bece6765893cb14981731b163a476d15d1a

SHA512
bc34d9af7ccfa8257e55b0343d3f5d0cfcce297b77c2345fe12393e17cf4bb7c765ad5f981b460b0947a1bc73e1fe83f1c87095e687557da13fdda9937b4db77

Download Submit
/data/data/com.slots.ysl.task/files/AdjustIoActivityState

Filesize
746B

MD5
a0becc2cca56426413107d74d9c8dc07

SHA1
c58c48cfcff23da54218015bd5e86b394cf9a9ce

SHA256
8888b3bfac2c244b6fd72e6813ca2a9160489e05426399f36fa6b31c3b4c7bc2

SHA512
a39f06872d121f2a3c0c66e427d6ee73f2039a6ea18b41492fda5e6f3ff6bc958148b5489642ca2adbda3f87e3b73800f3b18762c3ac685f8f864ef1da1f3b9d

Download Submit
/data/data/com.slots.ysl.task/files/AdjustIoActivityState

Filesize
746B

MD5
57988a735a62e7b11e6ff844f5fc943f

SHA1
326427a6da41a502f4c3311d6b1a183a3104d12d

SHA256
c5d3506bc97cbba9cb78fb2742b41ed56c4df88b834040cc1a5822c4ca3e0fe6

SHA512
07474c1d753414662342596262e9d2fcb4244aebaf81357b034fb2583b1ce39c8816459b3f781b731c0a15b699b89512a6b65f15c3049b53c9ff4833b0ce6cd5

Download Submit
/data/data/com.slots.ysl.task/files/AdjustIoActivityState

Filesize
780B

MD5
a775a8c7ba3a06a50bb98489da4e9832

SHA1
7906a1151d183602f28a84653efe54603d328d0b

SHA256
622a692c25d06a0acf228a49b0bb5c37f30ffb85c226e37abf1be63f2153bb7b

SHA512
5ce364845a4422188d69cec45cada930f96d82d3935e8bb12808785eb6a46a1dbfb18d76ee3cf725adf8b705a16d16149cf6d464487ef0be1455e5796b2e3310

Download Submit
/data/data/com.slots.ysl.task/files/AdjustIoActivityState

Filesize
780B

MD5
137edcc73502a45a9eb0b233ad63d50d

SHA1
2a69acb60796436833cc97739de914a1b51a4bb3

SHA256
779c24cc07266ed514a851508824a9195069acb58ae7b73ad25abab73bc21999

SHA512
be239ce8bb93577210afd04e097dc6d74d833a0c5fe0562bb311f8df24bcc4c20fdcca960f49dfdb836cfccaee9b878be5b4033d9bc0360c91fc0a8cf76b762b

Download Submit
/data/data/com.slots.ysl.task/files/AdjustIoPackageQueue

Filesize
1KB

MD5
201366e0d2e10af946c172838b7d0201

SHA1
dcefa5bf0dd96a8a6663837c84aade05fce29d0d

SHA256
a672a19ff662d97468aea2e42a715f8b4cc7de71121e303c6bdd75bb5b3b5f46

SHA512
5643f9d41f9ddbe6e39107b1664eb95720d5245e5888d2b8bf7bd56160da26030b6effd6b455ec59ee8e05488a17bcd245462f6bd855e6002bb6bd0715807066

Download Submit
/data/data/com.slots.ysl.task/files/AdjustIoPackageQueue

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.slots.ysl.task/files/AdjustIoPackageQueue

Filesize
1KB

MD5
866923bef04b72c49daf5c74ce72ed0e

SHA1
9257a7aa53c820677cd8cdc6d5f50361d0531abc

SHA256
ac4b07078c5b11b66aee7782f25cbd41eb96f132b1a51934cd9bbf198fb8b952

SHA512
416a8c9152b3d86c01997ed453307e3fb7663700c0a4d99d8c9bbbb1e52db4468150134b73621453b43c3efb9b3de0e231427a6998c53f0ec7e6fc4142e9db8a

Download Submit
/data/data/com.slots.ysl.task/files/AdjustIoPackageQueue

Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.slots.ysl.task/files/PersistedInstallation2818009684777446812tmp

Filesize
90B

MD5
fd9d9c5f2f230ef55748c7974ec68650

SHA1
f4136c2a3ed2e334b1e70c53d6d6d14c9d3599c5

SHA256
87ebc3443b210a783dd4b1c5234d543588dece00196fea4883d5a1be1e1db733

SHA512
37d4f24750c72b08517fe70c4661757bdc49d075e33b47f3834e65281b4d6043bcc4d12bf1e363e36dfb4b80548b9817b7ab68428def07d687899eb637aaa6ef

Download Submit
/data/data/com.slots.ysl.task/files/PersistedInstallation7111532895710598992tmp

Filesize
565B

MD5
294b2f88912c338fbd5fc44e2939e616

SHA1
4809faad9e5480b5152be5476fbd5f7d72c30c4a

SHA256
9b73087598295fc700b8daae0cb4e332da61a46053236bbb44b234b6c5edb003

SHA512
1bfa7f765cc0b026ac072353fa454a286ab2ea2cf69f07b4cb73db3487e5259809c902060cf0fa03852c751e2269f427276bb4715cedf9d99f92b0539062dae0

Download Submit
/data/data/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/temp

Filesize
329KB

MD5
56cbb19481e91412c76d948344c3bd10

SHA1
14a85c278ffc313e8c23735fd76f445b2e417781

SHA256
955d1d69b7693eee7244a2ffeaa8b48832db47a620b8328d4eeef09a379d97c0

SHA512
fef77be819e2ed4449b68facdb506f3fe117c2cad9192886e83ad7d004cb5137ce4883baae513f08e721cfb73e657403bbd3da80ded9ba2d34e6dff469df80af

Download Submit
/data/data/com.slots.ysl.task/module/opt/data@[email protected]__10051119.dex

Filesize
24KB

MD5
48f4c0c639065e5756083295abb0e43b

SHA1
7f3d4efbc303eb9323d80c691ffef18e105377da

SHA256
b7f34e2e6574eed33f8d10769c83bf010921955930277a0a6918e2e90e334519

SHA512
a3b8f13bf00ae9628ef1f501d8e2a7423012bc57fcc7cd6bf2ea4158a804270948665d73b445633bb4263d96a675eae94d30b842b5269d7406b72a2697a9a8ea

Download Submit
/data/data/com.slots.ysl.task/module/opt/data@[email protected]__10051119.vdex

Filesize
329KB

MD5
56cbb19481e91412c76d948344c3bd10

SHA1
14a85c278ffc313e8c23735fd76f445b2e417781

SHA256
955d1d69b7693eee7244a2ffeaa8b48832db47a620b8328d4eeef09a379d97c0

SHA512
fef77be819e2ed4449b68facdb506f3fe117c2cad9192886e83ad7d004cb5137ce4883baae513f08e721cfb73e657403bbd3da80ded9ba2d34e6dff469df80af

Download Submit
/data/data/com.slots.ysl.task/no_backup/com.google.InstanceId.properties

Filesize
2KB

MD5
8503ce247c5201fa8727fb1d95e56e42

SHA1
b8a6c93429f4a33a7f27e0bea651ddbfd7c033b6

SHA256
5d87b288c0c4b84133de5a4cfc325d47e1949e8b0867017a9af41488981e8b60

SHA512
7f4d70dffbf57ae429a835711c25a29b086c54bde9664d57c833bac8249f529e8cd54253744cf3a831f2a3bf1b7f55158a755199336d705e0fe9ba92fa0467d9

Download Submit
/data/user/0/com.slots.ysl.task/cache/pf.dex

Filesize
3.0MB

MD5
3e2d77dd1c9a56af3aed4cb6f9daca32

SHA1
df90f0cf1b6db5fb5f879b4d26b5465a73c20430

SHA256
5fe7bab54f93b908aeee8b9e3f090480d62d12a7b518b1095a98bc1a4dae6019

SHA512
d401f891788624a5d133fba4f6da61443f4d129b8b76ae6dd10dffd2bebf2ccce67c35a5a10568e606fc4e7b0a6ef6ce0758b200a61a55d9277c161d45a921c7

Download Submit
/data/user/0/com.slots.ysl.task/cache/pf.dex

Filesize
3.0MB

MD5
1f1c9ee5efbc97b8312ef4927e654520

SHA1
ebcdc45655a9e8eb4f89632bbb1ebf4dcf8e4abe

SHA256
3389506ac1cad7e9567698cba413f46d02df8eba57799815f2c7049683337935

SHA512
449bfbcd3f5042bf81d8a4d99ea2ce378d7005e99a013c18ec1388669a743be42fc752ede94964a253b8da934995ec85aaa0bc46b3de650e066a763f1a8a3dbb

Download Submit
/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex

Filesize
321KB

MD5
09ea687f46bd1295a61915c6dc450014

SHA1
27b8a5603bd1232edd0110c34d4d313b529aa0a8

SHA256
a82f7683c0efd10356f30c7969e6c0cf8207ef70f19d498953635933f466ebb7

SHA512
466b81414eff468e499bd9be66f2899bfdd79b723b94f154b4e4a4315cba50d471e9409b8f6cd07570344c6350c02af965ae8ef9315115891282495209972435

Download Submit
/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex

Filesize
321KB

MD5
09ea687f46bd1295a61915c6dc450014

SHA1
27b8a5603bd1232edd0110c34d4d313b529aa0a8

SHA256
a82f7683c0efd10356f30c7969e6c0cf8207ef70f19d498953635933f466ebb7

SHA512
466b81414eff468e499bd9be66f2899bfdd79b723b94f154b4e4a4315cba50d471e9409b8f6cd07570344c6350c02af965ae8ef9315115891282495209972435

Download Submit
/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex

Filesize
321KB

MD5
09ea687f46bd1295a61915c6dc450014

SHA1
27b8a5603bd1232edd0110c34d4d313b529aa0a8

SHA256
a82f7683c0efd10356f30c7969e6c0cf8207ef70f19d498953635933f466ebb7

SHA512
466b81414eff468e499bd9be66f2899bfdd79b723b94f154b4e4a4315cba50d471e9409b8f6cd07570344c6350c02af965ae8ef9315115891282495209972435

Download Submit
/data/user/0/com.slots.ysl.task/module/data/module/com.cardsdk.ref__10051119/base.dex

Filesize
321KB

MD5
09ea687f46bd1295a61915c6dc450014

SHA1
27b8a5603bd1232edd0110c34d4d313b529aa0a8

SHA256
a82f7683c0efd10356f30c7969e6c0cf8207ef70f19d498953635933f466ebb7

SHA512
466b81414eff468e499bd9be66f2899bfdd79b723b94f154b4e4a4315cba50d471e9409b8f6cd07570344c6350c02af965ae8ef9315115891282495209972435

Download Submit
/storage/emulated/0/Android/data/com.slots.ysl.task/cache/tpm15-250x350.jpg_tmp

Filesize
78KB

MD5
86fab9d91b03dd477d463db572fdc0d1

SHA1
85798bf02603f350bcdb66cb4c68faee2480b454

SHA256
612ebcd2085cd03395aaf87d240515327b4d113452aff3c161a6317e55f47a5d

SHA512
d13a7aeb7ff9be3e57b6e6925a2af0621555edfd68480d3195640f1fac912e56610301c7e80ffe2ef54317cb03340390e808fb76fcacc7652c8cb2e1f05c64cb

Download Submit
/storage/emulated/0/Android/data/com.slots.ysl.task/cache/tpm15-314x600.jpg_tmp

Filesize
161KB

MD5
583a2007c35b0f245c67b07b00bebab3

SHA1
2327440ab8058b4c4bd5ac438a14bdfbc84a2ed8

SHA256
32add9effe1785e50866495259f9a1461d00c8f6edf8deaf1b9ee7c72ca8baaa

SHA512
5381ccb20101eca14e38f8aeee782ac2e320ac0e80ca2715779b00c6c120c5d999df0944bef06516101f357a8fcfdecaaa21a4bfbfc0dc758bfffdb982fb73c8

Download Submit
/storage/emulated/0/Android/data/com.slots.ysl.task/cache/tpm15-600x600.jpg_tmp

Filesize
114KB

MD5
25b888a68a59269d6be8544372c3e055

SHA1
028f09ab36ddffb31d9a3d43c6d08553cbaaadbc

SHA256
98cfb7b35536a1297237cf346953b1fb34315d8f2026bd8adfff8e30d94c82b9

SHA512
fdde19fd8d43e1c9982dbbf599b020a200fb18793dd7a8cb0abde055d6368099f4346c4881b1ad86fbea3d8716e325f5bbebf80ce0be3c4c185d6bd992d572fe

Download Submit
/storage/emulated/0/Android/data/com.slots.ysl.task/cache/tpm15-750x1334.jpg_tmp

Filesize
250KB

MD5
03ea1ea2c5342919513c133d0e72407b

SHA1
6ca30fb01f6bdd3d728a6a24341a84d142ddba7a

SHA256
bfba141c2b6a08d506a167dc6bc6f329f4ee4ddf072af997c726ef881b0a041d

SHA512
746815dcf1bb8f2f7de9bc53361fafa5970d7e45689b9af7672c1e7e19915c1d9ac00640e785506b807b610fa4e136ddd001cd7c56c2abf44424ff4815731e4c

Download Submit
/storage/emulated/0/Android/data/com.slots.ysl.task/files/il2cpp/Metadata/global-metadata.dat

Filesize
5.1MB

MD5
7a42306f3eb59717b2effc9da3fdc02a

SHA1
2b8fcd89d12fdcb5ac123d41c62f6e7472f2a803

SHA256
a3a9d06167d6fd05177d2df3aacf8c01cfddc29ef3a2de9d127d48e5e36d39fe

SHA512
1da95549e2b28b2bc2fcf7a1636f09f5c07ce0897c37d7bc88b97eb81e44860e2e7209171eeaa149be55115b1226183c2ba7a35615a359cdc925d0950eadd340

Download Submit
/storage/emulated/0/Android/data/com.slots.ysl.task/files/il2cpp/Resources/I18N.CJK.dll-resources.dat

Filesize
626KB

MD5
7829d9746d58f78606728647518d1b25

SHA1
3f03820fcdddf31075fc4a4e0531a7a48e104645

SHA256
63a848c14c41b4d34633aca7581b1d207064c6230bee84a349ff00c7bc24553f

SHA512
637fcc4ffe1742163e1d71a60ac9439727e2e045331aa32984e557401883be8fb0d401536b56116518d2556d5392de546b02c4ed62afa09c0404f96a06e51509

Download Submit
/storage/emulated/0/Android/data/com.slots.ysl.task/files/il2cpp/Resources/System.Drawing.dll-resources.dat

Filesize
24KB

MD5
be7be6458aead12c07a04f26e260c3d1

SHA1
34d46d957520cb1a525ea9eab36cc40d57a3715a

SHA256
7c33aa707bc3fdc83991b81a97d6fc622b140762a767300f08f616c2c0a91255

SHA512
554a6b2983fdd055bab56b7f210340521b7e7b480f38aa6368691ea9e38fbaa5eb93aab0137e6c9d7f3b58feb0780753d48eac951a83ea8db67a91df1db0ced6

Download Submit
/storage/emulated/0/Android/data/com.slots.ysl.task/files/il2cpp/Resources/mscorlib.dll-resources.dat

Filesize
329KB

MD5
21d06dbc8af6432b2b49536ed30609af

SHA1
11a1c0e2ab2f8c06fe4507535ed47e0dd279a60d

SHA256
c5baa176a5b72cd545266340e42102d393a5e43d38c95796bc828918bb95277f

SHA512
2971f54eaa14c3ce6e2352e5a1aea5b044f0894bf4eac92de8cd92515b6473b5ca56ebfcad4369a9d4935cbefea2540a83f332fd4d832c37768310e8776ceb5e

Download Submit
Anonymous-DexFile@0xcb468000-0xcb46d064

Filesize
20KB

MD5
9bc4399f6211569c5935e4a449c3362b

SHA1
f617684a636f98964e44c97194570bf2336dcf38

SHA256
f14f45afd0a5d08b046dc89b394709bd6391245f64955cbfc8c0d5ed32fd13fd

SHA512
30ee7a923281a0ca81b8756a2a60c6f0da08abfd8199727d4a1e6a360c9334c2d355110fe7269dd9ffb2a314b5bdf447526d2769bd1e3f1098f5e0fbd8714492

Download Submit
Anonymous-DexFile@0xd9270000-0xd9272cbc

Filesize
11KB

MD5
3c92464a059141898be5049ccb5f9bcd

SHA1
e11a8320a7cdb93d197e9b42386bbd91fb65458a

SHA256
1431e7d7fd88b604a9c3e7025992617af92714e42c5b6ea4aaa230dbee54e32e

SHA512
032a45f51b1a4b61c0ac18d778ef64cc69d9240e2475e763c603ffb6aec05f66952e03f25e32ddda46c7d029e9aa1a08e2a3e800de6d92c05f7db7761e893f2f

Download Submit