Analysis
-
max time kernel
163s -
max time network
183s -
platform
android_x64 -
resource
android-x64-20240514-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system -
submitted
21-05-2024 15:01
Static task
static1
Behavioral task
behavioral1
Sample
63b63ee21d966bc71663fbea3aa118c2_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
63b63ee21d966bc71663fbea3aa118c2_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
63b63ee21d966bc71663fbea3aa118c2_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral4
Sample
mimo_asset.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral5
Sample
mimo_asset.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral6
Sample
mimo_asset.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
63b63ee21d966bc71663fbea3aa118c2_JaffaCakes118.apk
-
Size
11.8MB
-
MD5
63b63ee21d966bc71663fbea3aa118c2
-
SHA1
e98ebfd5ca33f46e43666d57ccfdf35c51f88618
-
SHA256
8cdcf3004d53aabc3e7ba23b2d4cab986328bff234471886953702656ca6a80b
-
SHA512
0c7e73c52bc2f65dd3d818fddfca5f6125601912d69c2d6c478fc3c2d5f348016d3bbab00d33f574e524d7db88b36a3ab3908a06f6f9b31058c0ef346b0f2bfe
-
SSDEEP
196608:oHFHWH8c8wfpznpzuM+IjkpHVL8A74W39zgbf0KJ9wqnP4FgoT7/EwsM46kfAy:CB86wfpznpzPNkpHV5cWtzuzGqnjoMMa
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
Processes:
net.playtouch.ballwall.xslioc process /system/app/Superuser.apk net.playtouch.ballwall.xsl -
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
net.playtouch.ballwall.xsldescription ioc process File opened for read /proc/cpuinfo net.playtouch.ballwall.xsl -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
net.playtouch.ballwall.xsldescription ioc process File opened for read /proc/meminfo net.playtouch.ballwall.xsl -
Loads dropped Dex/Jar 1 TTPs 5 IoCs
Runs executable file dropped to the device during analysis.
Processes:
net.playtouch.ballwall.xslioc pid process /data/data/net.playtouch.ballwall.xsl/.jiagu/classes.dex 5235 net.playtouch.ballwall.xsl /data/data/net.playtouch.ballwall.xsl/.jiagu/classes.dex!classes2.dex 5235 net.playtouch.ballwall.xsl /data/user/0/net.playtouch.ballwall.xsl/app_mimo/mimo_download.apk 5235 net.playtouch.ballwall.xsl /data/user/0/net.playtouch.ballwall.xsl/app_analytics/analytics.apk 5235 net.playtouch.ballwall.xsl /data/user/0/net.playtouch.ballwall.xsl/app_analytics/analytics.apk 5235 net.playtouch.ballwall.xsl -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.content.IClipboard.addPrimaryClipChangedListener net.playtouch.ballwall.xsl -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses net.playtouch.ballwall.xsl -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo net.playtouch.ballwall.xsl -
Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.net.wifi.IWifiManager.getScanResults net.playtouch.ballwall.xsl -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone net.playtouch.ballwall.xsl -
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.app.IActivityManager.registerReceiver net.playtouch.ballwall.xsl -
Acquires the wake lock 1 IoCs
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock net.playtouch.ballwall.xsl -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo net.playtouch.ballwall.xsl -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
Processes:
flow ioc 38 raw.githubusercontent.com 39 raw.githubusercontent.com 36 raw.githubusercontent.com 37 raw.githubusercontent.com -
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes:
flow ioc 34 ip-api.com -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Requests dangerous framework permissions 1 IoCs
Processes:
description ioc Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION -
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework API call android.hardware.SensorManager.registerListener net.playtouch.ballwall.xsl -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework API call javax.crypto.Cipher.doFinal net.playtouch.ballwall.xsl
Processes
-
net.playtouch.ballwall.xsl1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:5235
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Hide Artifacts
1User Evasion
1Virtualization/Sandbox Evasion
2System Checks
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.0MB
MD59f88e36fb11c389a67adc59c0a109532
SHA17cd88d6af1398c40f6ccd0a0e406775dd39f4fa9
SHA256315a8692ef6b7fc989a617487d58b820a6217d6d1294cfbd123f9ee9a2e7306c
SHA512c7a9f75cc3f694a6068ea44fdc1b5b40f6919067ef7f50889971e531ad5f7f33262f4234d324fa49445818111252bb3e6a2060778fd4612ce34e77ee69712795
-
Filesize
4.1MB
MD5aae041a0578ca88874d897346dac0f6b
SHA130a4622c3b45b31a9c63af143e5813e892dfb68b
SHA25624c7fdf0d4cd551f931a03513b8ad578d492dc415ce346f034cf37a2076c71b0
SHA512cb6e4b3bab864c84b31222eb2ad6c89b6b7d4cdb679c1b67f574e3a0105131f302d46c1bd48b4344d896283740f09d42b7fdf628fa4769213ba8f9890cfbb2e4
-
Filesize
487KB
MD5610a895c4a71bbeeaea16eddb1422bbf
SHA19f919de42ed1e80bfadfef48f8202b202166f869
SHA256baa349e9b5a47be21b6ea00ef2e0c0c5dc203c0e4c391dac46df07ca9d333217
SHA512ef4173ba32309ef1257b75bcff28fd44ab14398577b4fb3b6b95323035c964201ed39546cda3b7115ba5025781f3b9c018443e7932edd50a25b1be60359f80f2
-
Filesize
525KB
MD5198e8f0e9b0d80997fde430f9973c1a1
SHA1dec0b84b06072ad07d44b445d7e23587c0bc7f02
SHA256dc9d0faf8652513f0a1eed698b9559e0bbfaefe12c203d239f551ff557abbe5a
SHA5122868fc26e0bbc32e6f7c7d6e56ed6e9517d0ea4a7d8021a5f50af5945d6ac27fe87f500e32eed5143f37d484ba95fef481c9d5c11b652bac2a26d267358252ea
-
Filesize
545KB
MD54f6ba7835b8b8aff7f7c7a97bc262b34
SHA12f9b2433c46ed5ecd9c1d8dcf708d07340eb146c
SHA2565a0062937d99f0b85e6fcfdb162ce6224ed0635cbb8cf6e3ac253d57fd8ef97c
SHA51214a0ab2048b3366bf3893eeb3c8f978deadb1d28bff5c1918976db49dfc62307eaf7fcfe843d0f3696d175df7710defe120273cefb6221ce2612b14839536f40
-
Filesize
397KB
MD5015b93140e10348bac8bbe9c1cd26e55
SHA196f545739c8ae213c5afbc97e1bca4ef0346a100
SHA2561891f588d5d58f90ce8ee77afc968279aef9011470ac5a172ae3066093e4a0ba
SHA512351b4fdac4cd30a81c5ae593583c7412aa931632e3fcc20062fb13c8d06c3e286bc8e8468d6d2fb753b0cf12d21e3614db38ddbc502cf0c8de1b1abfd4f6a055
-
Filesize
400KB
MD53e86b24cfe8ea3644e3a6bb2f3bc75a1
SHA17881136fb412166d04ad5b6c4fdb9550a66fd99f
SHA2561b01837a2b9004309bff95248adc60d39ffdadc90e52ebf645b2c5ce76f28bc7
SHA51240ec714867b4a3e0aaa920abb648f331ce43e8bef442e782eff5ebaacb1052785e681c23b85f6ec50bc4e57e5b9924e61ca4fd72589f810ce8c670b5094b612b
-
Filesize
24KB
MD59692e98d6b1a429b4f3608d06bb7abab
SHA1da9cf8f094f0bef0ee72a7547b0e7effff188452
SHA256015a0353431369b2ff2471d2629111f041d1c4deb338196c178390519363f98b
SHA512cfec4277edaa587b33f96d0768f3e0af81008690ce41267fa79a1505a2db36d12c586bfa48b498de866166fa9b05449fd835cb0c71eff52e1e071f9ce6b56157
-
Filesize
512B
MD5649137dad683e4df2f7ea4664b61e2ce
SHA1e59bc1bd9e6a0cae602a73ee7819076711db8488
SHA2562043bd27ad5c744d6272a73c92b94c9abe98f4b6cc2d0d5e477c0e1c858d3566
SHA512d24e52cd6c3b972f44ec590727faa3d66ed4c7cec7dcc829a87bf8037414e8b153bb7d8afa7d045e10b53ac3e912ad7f519d251b4009985d85269d23fcfa8d47
-
Filesize
8KB
MD5ee1e4cee7b3e4e74410c85dd0abb6852
SHA10e5231a5a967c04bbbb17d87a421dd4895670699
SHA25666ff3c0ef2bd8df1bb8e460228b0412db7266a965a16f73af2647cd64f0d37b8
SHA512e3d13243944b015962bd092d743120379599a8001e746584e7ad04b86ff34626ca932739847b4eaa4e608ecc5fa565aaa3b5899cd2acd6f9dae1a17c0402f0f7
-
Filesize
8KB
MD5fafd516a218c810a5c8f49b4e47a889c
SHA17ba4714e9fc18ce3c680f7425c4e183e25d24bee
SHA256a592dfe637a5065f0dfb981c8587df1363dce6c0c146a7f40f6c6fba1a8245be
SHA51209e58a2f4c144774246581631a7dad98cfc787a2cbdb4bc108ae1ca339a625a40e4f29a88730e9b5980f69576a22fa5e21c56e94956e00becfcf21549eb59021
-
Filesize
8KB
MD581513cef9656738e0dfe991fbde70d48
SHA1828b9cda234b93a9e0dae3e91a5f8fd46be08c9b
SHA25657450c3af1104c7ed8664cc1de3973f31c3078e3c607627d5ba0ac7d0445b6ef
SHA5129b681e91b9401d48132a423a54eab2a9f5a52dcdb844cf8e0ad9ed446f2c520d897f1deec7743989d9c6cf99be76404797f66f7b1a805610ecba7c09187f9588
-
Filesize
8KB
MD5175094aea1b6b1095900a1c432e6cc7c
SHA19c4590a3857b30456ba742aa1efa770ab9f05de0
SHA2569d7f123809e7051210e75e125d3b0d575578fdb41b85b56cc17dd30b21e2a77f
SHA512548c659655a3026ba7bac74de3ab3a2a5487f7d74269247ff6c6be9a8af2d1a35fda3879e31087378baf4b7004af480a13d96222067f91a5a0eedf2d481bb82a
-
Filesize
12KB
MD5fffa942fd3f2b92bdbed7b46aa81d1e5
SHA1011a16a3490f898395d0d08630d1fe8f8b951f2d
SHA256b7a32ac339233579184f1a94f8a9ea02d6a6c2d69525ca50feabec1448628c7a
SHA5126e57fb11a7e68da44a27d662523929fd35691e919e2ee70a552975040da9f0b94d84eb8d1d59656c319789ffa620d499e2517a1a7c8370af584b6bf06632c982
-
Filesize
16KB
MD5862df7baa0a1975f19d407cf7d36fa60
SHA1299cd93a8b824739eeb51bff8446cd5aeff43bb0
SHA256aec3e4bb8875c61a90acb28e2ad2c3f5b84209dcfde58af71957d5f0fbff22b9
SHA51204ef03e0625662ca9cb4c499c0827b977a650de8f29720a52ed34dda073890e83e5b5d4f9f971080e9322c21884def017fb0c586d7d877a22f0c9deb16afbf23
-
Filesize
512B
MD596314e6b88568908b3a16411c6f5dc53
SHA18e9449b2901e499e55a48709ff3ad6f69a514fb2
SHA256c2d877066b62c18185782d1595dc90149a118ee4db8ea8349bb7267acd1e9fa7
SHA512ada676d73b774c2b008ef33584ea4888b9c07ae1d30b4338a037f472db8d9d86808bba2758946ce401d4daf4eb6f60f1844786df4824499242216a1b10be8faa
-
Filesize
8KB
MD575dd6e97dbde21963df8f2994ecfb432
SHA134d4f59d7fa9a3026cb68d283e66f55600996151
SHA256223f05926082a4612b6cf4d1f4822932c40c0b457f7e9488624010ed3e4f1169
SHA5128a0858b0616f991984591f647d6edff18883efe91488c6b66477e38540d1bf5bb3f29887dc135c53fa4b903999f1b28f50a33a032c5e4507788870c021e6d0aa
-
Filesize
8KB
MD5cab85aba0228b405dd44f7a086fb324c
SHA152b8ea06793d399d7355c3776563028b9ac987cc
SHA256abfe229f9eab3849ede77b09a4e046c8f0b2163e1a01e790303d666e5154d6c5
SHA5120c2cd3204429743fec30155f8d11c67542c7369aea3ba74d123653a574c71696cf3e638d602dcebdc282474a3f0bdd5267b29c1ba42352a19d403e5bc8daa185
-
Filesize
8KB
MD53f6901c15e8048d84a492c2cad863e5b
SHA1801eccc136ef9d99bcb49e67b6d73aa510402ded
SHA256ebb27aa081ed35892d6a2e13131bad708b675ffe0cf38b84e629f4260148e076
SHA512b76113d5cb92bbbdc651efd4de5a02a47937870f887c248a3e703ef35e30154f440f48d575101948769809f7fce6d7f9a5fd08b20d03b6efd9808b0cead5b3d0
-
Filesize
20KB
MD52d4a0d6d2f29ecbedf642a83ad8d1b37
SHA1195b82b0dad0eb27c01957eeeb9680fe81b7e042
SHA256ef5c6406b13e06831219070efb7837f28380ff01330a31fb35e0c5abf6634201
SHA5127300d3db8475d1182f007b52aa88ca45022f6ad172f00f9ac558970d8cad2fb4c84c7bdee298b11f58f61ad012459e4e8ec977603723247de4f5b0520ee75d68
-
Filesize
512B
MD5cd3a91849fdbb2045b8d901f5169af4b
SHA1b560e2df65845e903222b92e4fd2b4d825faf32f
SHA2565acd044320d1f8db4e53ce6e4dd1b6fd50714d551e5ca4f8626e500fe94a6dea
SHA51264f5d278fd7589efcffa1ef065d96657ff9b4546442f5d8cdcdc9bbbb9d5d57504152099e5f4452eaf6d420f50a4103d33a6f31629b7fb3c97515508c9068bce
-
Filesize
8KB
MD5083a447f9325bc7cb220a69645dbaec1
SHA1dd505562c6405b271bec68af1dd0b0cf65b2a832
SHA256b5431d5b2b91933a7efa9bfea05681579cb347ad2ce23dccf000066a841dba00
SHA512d8eab3a65bdec1dff52f6657489b150995175295b041dc15679f5f66b193522a3bf6382ec0ed8ed4a49597b1a58327c5d42039270f6b6e4b44a7fd3a549b6f1a
-
Filesize
8KB
MD512f73f05d73f2e2a6f4a551b8945e4c6
SHA182febc2fade03cef3df075626aeb72278bae0611
SHA2564bef9a770076bb21afa5e96595486b56dbda4bf505dcb9191ac35a2383c42bb0
SHA5124a1956a808b8f8333c6eeac844be65fb709ad01cacfeb11843a046bdd3d8dcd7b27f8444f5fc6a59f652d77f1e9b9ca8606e7c54c6667735325d3a0ac327a013
-
Filesize
12KB
MD5ab06067ab1120dcf130da08e373bf6be
SHA1097f2820702e2fbcedd3ef9230ea5c9a1d0c2e10
SHA2565d364b6694940bba2936e581626339ce567a462b88b8606e8c9999e3492f89f0
SHA5123dec2c193a93acb909b0a154a372152a0382d4807be194978c1a26b8bdba0bf8462b05ce979f925af48e49b5e48695b50b45376712a86114d559acecdccea49c
-
Filesize
12KB
MD543716bcc3ee02d1b2082abd814683bbc
SHA1edac5a4e87c5eb278f33fdd31d014575f72b6bd1
SHA2564af3560fb989e4a6294685812dc73c097678d1e52d50a0bf286d7e8017adb4bd
SHA512f03e917d8a7067f31a5140791a55e9235125f439c5c5f20453a59074441a380f5e8021b49f5f78655f9f111da8f22116a178546614d6d97fd7518d6f0258f87f
-
Filesize
12KB
MD58efbe13b9042df1ad2dcfca93da64d9c
SHA198f3433c213a522bb77aaf0664a3881c2da6408e
SHA256b7519752b412eceb47f1f33b9d2fb3799d89528bbbde5570ccf49ccae1ca9382
SHA51241627782cbe6561014c2fdd4864eaf10df1dddde7aa1adc12cd946ea70dd30b1037371c707e0ad753991e022b3dd51833b71478b70c77f1e47955d098e53e172
-
Filesize
16KB
MD546e6d260aad4939e6578fa547c8128a2
SHA1389dfa55d720f3f8255a87e019855ecdd4a31590
SHA256ef19573174dd62a5a63a6aa2db6bdd508173cbd8ead7b34d338d91a7ae9308c6
SHA512107e4dfe13bab1e70011db5f56415a886f06664336dfa8ef2884556ad1c0e18fed156be320bbc12282642de4b1125756757ec22e225ac3b47c1a7e17b823a581
-
Filesize
512B
MD508ca181a015afdfbe3a4628dba621634
SHA11350814a992213beca81aec78c4d96c7ff0140de
SHA256afd7e7fb0832f668d2c382c916c7363297df023e065b5557fde1118bfa0197fc
SHA51209f658cdbbf795ef1e4b0df65fe89b511219f5cab44a3a6bc331a96783f5f9f9c00fd7bdb8264b6fd2a63cc7eec5c47d73d433630e3344e732a76bc38527cba2
-
Filesize
8KB
MD5e229207553fbd3718744f7d219de2d79
SHA17236dac2d597f464f8fd47addb6b69817db543d9
SHA2569046c1991e20e80ad01eb0190fb07f88735b79dfe273f39b538f073273167ffc
SHA5121b3fa0e2a361d0fe93055d371f3dbe917f1919331e55ef7904f59e7c9cceeee632d61518ac7222d9dd449ed8d12cf96c78bf872e32371d63a86dbdfc33fb6150
-
Filesize
8KB
MD562bdc08ea1bff0d6baccc35d15393b66
SHA1e7773f543835eb19a55597971e28c15a0c5cde70
SHA256f294c6b05cda29a93085ae6f54fb31f1c210bfb8a0a3fbc71861d7f5837157d9
SHA5120108a87a99a28c725baac532fa5aed0d79fc20f82822e2c5c7a84c05a21db418604e54c294336e38ea0baa4688d3db37c837ddff0336a3054aa378896a317fff
-
Filesize
36KB
MD5b7036131b84bdf2b66c67fde18d62308
SHA118b1e5a358d68c846495cab5cfef7c6679659093
SHA256c2c0bc8842203ccf1665dbb5b3333b22ae5a6ae3ef8eafe83e7f43adf32d0295
SHA512256bc83e1a516a58f5d1d024d27dad3c26723df0f96e0deca6baac86d84518000212570b06996a14bcbeadff05fed05125862aba2d4aa08c15a6999563dac067
-
Filesize
24KB
MD579ef85cb0b6d8f789a14a76c6b3adef7
SHA10adf0c0a79ca585c0f14a2886501674da00ae837
SHA2567337137edd5f6601136a1939b6612a7716ddeda2a2ed93592e1e4528815f096d
SHA51224f9fe2f59889c50dbf2cbcbffac8f731f43b0a6b9f22d989e276b9c5a78c844b8223f76c8d0e9771235d74233d85dd69047c103b01dc75eb8e543ff1ab2fffd
-
Filesize
16KB
MD5e53460983dbf2cd0e104c31c003d1d53
SHA1048365199e988a67e9eb239d6072260a6c8e2415
SHA256e849aec4f2bef3ccd9aa69a7eda0cf1e8da0d362a8d685d68f6ebbd08a8a466d
SHA5129da9b1045c95b127476e8e599e47d06cafe122dbdf67763d687e278f6f21d7b2d253224a877f6a569072c8a3eb43cabde8935f53e3e97a90fefbbca53b8cb9d4
-
Filesize
16KB
MD5fcbcb76003e0c825bbc298bf79f7e40b
SHA168656256a3d45073eb49ccbffdca83df210a0b45
SHA256930c72c494037b20699bf188fd9f7f0991d71ceb730f56b0343750823a3bf163
SHA512e21f40b04815faa153fb7d5488963dd034c678fe08e6be4ee806c19e91deb8a384e2a07c6149aeaa3756d02f275e5ca0f88276c9580677fb290462beb2fa3854
-
Filesize
28KB
MD5bd08fbee8e294cfdfc345287ffbfaf6c
SHA114c02e53817e421ebdfdfcfe068115adf6589d4c
SHA25610f02a0f097d34b6cf917499d382df1aaa6d1cb2b0431a4b4aac5383f42d837a
SHA5121b3cfccd1cd5453eab722294a800d6be62c75ee95dadd69b1ddb04cfd9e33e7b518348bd51e00e026e6070c695e7cda939910bf6066efdd1edc2b667dd8af2d7
-
Filesize
512B
MD50c9ed2503c7162deace8e4091f9d32f8
SHA1349ea7fa59c0c92ea72def2f9988ec8e3a98eda8
SHA2564dcf5726611d921c0f1928a84c12ebdef4b50e43152894555dbbca958084c8f2
SHA5122788fcd7a9f725717f2f184a25d916a3463097a7b5481cb11807bc72ad7a64d38273dd2472e3a72afd8ff3f0b46b1657e32c67d07dca14875e0d02b4a12cae28
-
Filesize
8KB
MD5948e74976bbc6c9b4e90e2b0f94dfca6
SHA18efb3c8936701e13da1eeba19c2424ec443bcc75
SHA25642e4ecb8166c2b3d0fc1ccfd4af338a8f31bf5f1202207fc3ee935c3f679f8f1
SHA512d5906e31f776f1babea46c89e78561489efc0fd16a37e67c4ccb24c09966d1868860338771b45bcf6c6c5695c559921504ae4528357a03967f44ce17b4d2c766
-
Filesize
8KB
MD59888cff6187e643277c1efaafdfb82aa
SHA192ec0f850c965e74f55944eb42feae9c161568e9
SHA256b31902c2e4b0f80edbc8c30d66046a895667d308f8f68d323f47309e882d6667
SHA512747b22e6535b96a431b0eafc3dab5bc22f44d45055024aebcc4e8e5de14cd87fe4d2bd5bf2ac8b84ff22a88d7419fb294cb390a981082dafc0f20bddea0f12b6
-
Filesize
16KB
MD5375b6f156145610991659173fe1f6fad
SHA13ac1423330d0371bb913279bdfb45a72e39d70e9
SHA2561da49a11ac04949407436fdda7fb95111ef20c75df279060be4f8c0d989f1804
SHA512935d50f43e1dfc8db77a1a87944f59f6c6a7519ad57cdca2d66b88dcf5afd0a28d3f942a146874538019244ef2e38162ba91bd83cf3c96bfda57eb8888daf6c3
-
Filesize
8KB
MD5a29a8a61309387fd0c9ec25575696d54
SHA1558c24fa24e977400d90c7f07725a10b939c08b8
SHA256a6aaa8bc2c02061a9d4cf7b5fc3a38a2524961ab91b45c5efab5c567e02708a2
SHA512ff3b8beabb6480dc29bedbb572d03b626794a257d1794dab2f28f579eb8582c078d7bddad3af90538a7063da8e8e08dbef0a9cfa4e2d501f16195c7282b28f19
-
Filesize
12KB
MD55a1d290ed57b3e8f45a0034c80b008a6
SHA1e6bb03c4fdfebdcbf450c5ccabce5735355a0d38
SHA256705367061146c535a4d6f9eaa69b954a1a1f78398dba5eb2f65188c6662ac661
SHA5126c9fe5955e218221cfe36a76084300a722c09e0efdd74a083c597de604f84bb0a9f7abd5eed12a08167de336246c7ecf5d3018bcf833f69250217d7625ff5436
-
Filesize
1KB
MD540b02728a0630ab29b874759814fefbd
SHA1fd307a6cdaa8e66e454a15dd65d5d32f9b2ee2c4
SHA256989827f5ec58d75e26b463dee70b9a7defeb0dc2832fac9f9064057dd811755d
SHA5120130c29217fd8e13e4c1953fe8dbf60b2d2d87981646992421d6b78838b2ce79cad4cef8baa9eec0a12e2704c2aef21808161471026a92c086a41b84216c96fc
-
Filesize
2KB
MD54ef6a57227b9106414bf7dcebb728c3f
SHA12157b984f6ea5c9ad78446d2afcf994b4ee36e01
SHA2565752d7a7f3aed923e01741963ba12277d0769af3daf5c09fe43227c76036ee9f
SHA512785f02af9f037faa9f9243aa2580bc2a5e4c01ebc8327ceef2b23e4015cec768f8d13f0cf55c6e6164e5a1160805388e8ce8934230061ff590946c7e1cc095eb
-
Filesize
979B
MD5aeaba0070f5fea423e4c883ed7932e39
SHA149a3183ccab15bcd8ab0bebc2aa37fb3e81c4a11
SHA256d99467e1d982c791c8e831ad17e61d456f11417774e48edcf8d4fdb4e7566582
SHA51291448b7b1991e5c50f52236f18f3211c25221a82ac8b370b005cb7c7b853e33962d9bf89c381819106d3371daa80f43540f06b0df9ca6e43a481a3eaddfb026c
-
Filesize
40B
MD5612cdccd3f37caebd6080e923243975e
SHA12be65605d009dbcac245635497e2e5b884442250
SHA256843bfe97864ca5958e6ee703adf7a2b6f1c8c4dbe1ea97c788b7a8e59b2404a4
SHA512769d58f949b131e142874f6fb2beb8eb70be8ec0f7de30f8b571914cfdf229fe8c49307387381efa6f108d605c70a7e7e09632305b71d57fc3e1fcab7f4e6761
-
Filesize
32B
MD561c0ef0ebb425fa3037a6c57fa44107e
SHA1a6b152e8ebf389c6d412fd0524332c60065342a7
SHA25693a17b69ff6b983887962af592251401ce3ef8652e2d1d3213730fb01df91734
SHA5129b04e8109fba5e93b65ffd4e19c7da9c5c9cca561fcdba413cfcb2f17d7005add5b302d0ed294e76adf448c87b679803aeeab747ff14a04ebfd74c36bef8e4df
-
Filesize
32B
MD546fdca5332753dbcb18952ecbc75762b
SHA1e3de3dc3998f1789dcb6726ab2cdc846033f1dec
SHA2569ede73268241c57163718112261e064bb0aebef90203e8513bd6897c6c330f2d
SHA5121db7abfc68962e467ba8914c34096dbeba0351f17338ef5fe32cf6a01343a1e64bb9735e39a19809f83b6a0ecf23870f21d11b31556168a2dbf39ce704dcd52f
-
Filesize
64B
MD540447a627f32ca9eb3fb97c467d972c7
SHA1f1f50c8ea8876b87dae7561dbb8879663aae5701
SHA2567bd9767ee41d51a64f85c0b1926558213bb5db9f8189fd899d8bebbd614ecea6
SHA512c51c5135aa1dbf5644c662f17962b4b3b3a454d09f015ac4cd59d21544111f885fa738bc8d683baef31cdb2423da3001f219817b9123faf5ff6df2083b8e6c97
-
Filesize
32B
MD5edd609b21695ae1f5d844e1b7e492af0
SHA19998f1bb0b7edc82e529afc78798aeaaf275c9cf
SHA2567dad80939d7949de4a438ede9d7118e975f97e88657a3c8cb079d4adc652c9c4
SHA51298a403fe63427a7e327831249726cdd84e8ab74d577336759fa50ecc765fb1abbe597d30db440950bdf506796e90b6443c3222a14be29dc372ea81eaca26a544
-
Filesize
307B
MD53ac2e1835384657ce62ae66a75aeba22
SHA1aa8d4f19dde55925dedf77731f6f36bd8fdfa5b3
SHA2568e26a83ce56e94efc49d3607ae48f98b10d3574bfd771d8ba3d9370bd26b8cf6
SHA5120ec59b13f4e5f9605eb911b3a9bda6a1c480f0517855d2c4b42d42694e577520afb50708ac002a080b0f247d5db18256097bb99f489105061cf314c9e4937cf7
-
Filesize
314B
MD55345a3fde15b4e1cf1b4132ee1c2e3bf
SHA1750410fba7302ad131734f50299083cd193a638c
SHA2561890725c4551a7a7f40da834a9c5ae12b1a27e411c063cef54efd6573e601dd8
SHA512eeb70ebd456d5050efa5da616ed4c58404f7f505a084dc18085f0b2b5e42d6e0e4556c7194ee3023f10279d4d1aa5dd198bfb2ab3c815a971304cb50e406fb7c
-
Filesize
32B
MD5bcfdf07e96a3eea4466e54677ab3e889
SHA178f70c653aabd31bdc0e98bf416d725510d7446a
SHA25611f6809bf3d8e0e8a5b6aa8832cca4c77b620e7435a297ea5e580fab843dffc0
SHA512b77e9b6d1044292f8d1c7620cd5e740f03fdd6c717de1bab4b94aa9e8898072e95b7b501ea43daf254447262fc44fd88467f6e47c39682dc97bc19ce99b16b41
-
Filesize
54B
MD56b3a36abc2b3c780e75a4c0faf34049b
SHA14a75ca1a7e0d9ca30cae7ce7392e8b2ebf6115c8
SHA25625e55419e99ab313e3355c7aed025d8ad3d7ee149b461d7fc6e758c1d8d36966
SHA512d4d46a6905941fc84117bb7cc6bb99c53a19f11088bb4efcd6a6db68f3b264a5d90314afba76bfa1d20b1668f32a576206e95193ebaf6db83a9b3c8ca3ca849a
-
Filesize
32B
MD5e5d6f7972c53ab0e5492bc3272f10d55
SHA1c28b3afebf0a0eaa2ef42a9ffb0e49b190da9507
SHA2562fa9b6ec04aed2f09d6bfe3bf1c600e68753efc6aa3428d40222a2eff998118a
SHA51260c2c1de1c8b67a31f95e6a17917b3df58a38e204b646e8af900fa5d7ec07e4fc7907411d3824fd34d8a962c52eee75d643db9ef12f8824d2b1384a6f93704d8
-
Filesize
54B
MD5a3016c183e83281f1aacb5a802915251
SHA1bfe80a0dfd5fdfdbbda0fce3cf841fb3e06c3978
SHA2569330e5cebeaf9615a49f1d745506e95ed59bf051bc1453bc20d73868ed075bcf
SHA5129e3e3d3961c1095d5b2313421076b33dd74ef67a56f90457e63540b833fb64ce21af1f0dae5ba2fcb69a6113098c154d85d3055638a6e44b497209f4eac2e019
-
Filesize
27B
MD5c21c244e9e952ab687948f21d549806c
SHA16870b86dc6a19f9a1c46494ca66ef376047ba5dc
SHA25688db43d50e6a3386986fc2b87e0efec34e2894a5d170570dfce8bfd9af3fddc7
SHA51212e7b5e951f94a21736c5127eb4fede6731e5f319ff0fbd91001cd2a7faef43e04bc204111360c31a218ca1a50c339cd2d1854fa171faa3c821179d32bab2577
-
Filesize
162B
MD5448b5b55301e4f99141722c80c6188da
SHA1df15444af9ddd5a395d02512657a3b7eb835e5ea
SHA2568c3a5b1c6c3f42a0be4a806ffdb14f464c697a14dcc94472bce2fd756feb0f95
SHA512353f7a2719159a54cb987d4d1ce30e4c9a1f35228595212b5afd0cce46917519e21b0bf0d520d8bd0f89b23bf0f8d7e819cc05f2f361b0db1efb684316e5961f
-
Filesize
12KB
MD5f0326dac3bd2b30f8d216ca46622eb2e
SHA1e34cdf9529a96288d206b07c5078afb012be5b7e
SHA256c59de2f2197323aae35f444e18f7f5d7ae2967cc486b0297bceaf329ef8dfcb7
SHA512b91250a4e5cc4c2464657d7d625a3d19144b321fbc091041bae340dd8f7a27712dbc0c5961d50bc039471014c568fb06df9b8305f20e4ad08c65894e56b4c49b
-
Filesize
1KB
MD54d4dc628d8a3facc8c167ffbbb0cab59
SHA16f28c74730b309c7536866b5aaf04fa69d95b105
SHA256742d07ce2cfa3958c889ad99e422f8eb063b824071fdd072e56a6de5c8d325b5
SHA51259843b5081a0f9dd353159ff0dbf07572cb44ecf0393798558f2f1fa054129902e8dc2da88db38565ddb34fc6857ecd338fc4f24f6c50992be638793e5554bad
-
Filesize
402B
MD5125dd77d7f63aff936afac2cd5769ec1
SHA1b4e5e0d6396be8d6cc29532db8074001b218cb32
SHA256ae790c947b53259c7eeddb6d0efd29b625414e00932366dfe9c016da53554db2
SHA51286dbd3bd1982c7b56cfb7bf7d0aad41e446cdd858aed1216fdd6d5b76b962a94ad8d0ea4ce103548dcbd226339fcffc9cc23b72599de4ea49fe4e0fa8c5bd616
-
Filesize
13KB
MD504ecedd182ec514d1a60d8d2ac199148
SHA13cc41071881e11ef4a5e8500ba83eb91e0502aed
SHA256690fff1587a5f29c71dd12bb95f7c8d0d25518679ef90c9a9adf8c69ff5f18bf
SHA51227a2e1ea979a0c3568064028558da583b72cdb5133442cbd5434c497ba0d2ba7a0a0445dee5657c4ec277af119b820371e03ac4c799eee93731b12379c491837
-
Filesize
85B
MD5e27a2369aa7127845ef08f2ea7e6b6d8
SHA1aae5816e400f86fda1869f24f6e0dce5e7fd4a23
SHA2564a2d6045113c91b77e9d1b031efe51536a0427ad21afa1dd6e4a602d8dc4503e
SHA5121fccb913b63ae84e6e87ab34d767ecd2bffc3ed9474a4ae2842156df2a9a65d3557b538a60456e09e66170b603bf1175602e1b792e32d558737466cb228c31a7
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
/data/data/net.playtouch.ballwall.xsl/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MzAzNzkxNTQ2
Filesize1KB
MD5e9e8d32c9244550a64d31d18da4da398
SHA1b98c2632a18bdfcfae8de80d262965577873920a
SHA256c9bc622f39bed71297aa59bb54a8ea8714caaf262f1deb593dd013d25c84d06c
SHA51256b7452ea99d32ed1f3139e32b9321937910a432bc39a143212314935cb5286f7f7c8222dace2289a0a151e0f02f7238e6c93cba9d40a2602be1fc65b1510bc4
-
/data/data/net.playtouch.ballwall.xsl/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MzAzODI0NjI3
Filesize1KB
MD52397424fb64e3e18a22c96cc0cff4bd3
SHA1d94ca65fac0c2733610ce82c381cf2bcab7f240d
SHA256525ea2591613c49e9e397c02dbd5160b228b43257519495d9649bbae66965aff
SHA512b0f1a770e5ee690eeda1c801a8d4936ce0ec9d98be0324694237298b72f975f825e7c0b8a4585cf4f99de223e208a091fee4688e01524e3cad6bc4d155f082aa
-
Filesize
350B
MD5943e02cba97779c0cd8c868585b89de1
SHA1263af6731db09935189e1b974e44b1707c3c6bfa
SHA256ad35ab147c92585004ac127340bd650bd94829f936f3a93608a78cc1b4e0300b
SHA51296093c9e7fcf8beef7a02563d9242d1554da25aa4b07c208db85a70740c378eeb581bc2ca1b8892dafc78c828ef80fb28b20574060760734ba2cd92a823729c8
-
Filesize
178B
MD58ccfdc86f4652dbd12c93beb32c90c2e
SHA1264578a082afadd64a8c6bcf19c90e8cd81e3253
SHA2565fb6a65ef30c35af06cb34957d4723f4405df93d23184ebb32d45ba483348823
SHA5129453a220e4fd27d336f32e8b96b18f7d25347b1abe4526ef6a261f25ee80193b63578ae329d18e2323bafca275f4c95a2c3f130a9143ece69555e5be7c2d2a77
-
Filesize
1.1MB
MD536e6ce6a5a4e2b31982e3f8208a1af0e
SHA1a7418ca9cdc61749e4c39e55cd4e74a0871ec196
SHA256ca10a9f91f5246c09ab701368126bf842e33e62c0559328b34fc91295c13d298
SHA512ee5022a46bc98db4be250a219a805073d5e558e5f3377de5d5becc5c3584f20988667af5e209dd2525c40c9fa70c8c7fac18eaaee98957b79d96b20a901ff100
-
Filesize
695KB
MD5c526c06b92f76ffbf2bd3232f1053284
SHA10e9d0fbef236f8807f20d9a14c50ddfcc1736b52
SHA256fae59c9be4e17b082d213c4ff1c7873cc7175b28f7c6664f8e8aa8280489017a
SHA5128a4da38bce8ae67d3e8de8ce44d63b0ae96f9f12321bc8f84b623a0fbc5ba4f7bb87b18141dd8a64227debef3be72f58b0b76636c5d71a217891f78f3397831f
-
Filesize
307B
MD533992343f6594ec1181727db6e1b65fa
SHA133ff5fcd71d2c821110c691a3a241cc3159bee9a
SHA2569e8df1a1f80d43f79be6c98736292839d4928f6877abac1787758478ccba6044
SHA512a63cda06ae9d0ffd79ac9e5fc6a42e5863f6ad5565ac6c267615ca7b30be571c89cc217d17698064b40527e014b498f5087888c899b681a260e43f09146c2fe5
-
/storage/emulated/0/save_data/net.playtouch.ballwall.xsl/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize234B
MD5b639072801f3465c57a3b63955a81525
SHA1030cf78cc28112bcf9b39b8401dc29d1272c3b41
SHA256d4f2686cd735e0f53cbad1e6da8997207b489f626766cd428e737a185548194a
SHA51278e7b89ba935b6e0c4ddf5563d8031f67396b2e437b862c0ebee36ef012151c0954637624626e2fe7202dc1eb69c2d8b48f9e282029ee4a5b76533f37d305c0c