Analysis

  • max time kernel
    163s
  • max time network
    183s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    21-05-2024 15:01

General

  • Target

    63b63ee21d966bc71663fbea3aa118c2_JaffaCakes118.apk

  • Size

    11.8MB

  • MD5

    63b63ee21d966bc71663fbea3aa118c2

  • SHA1

    e98ebfd5ca33f46e43666d57ccfdf35c51f88618

  • SHA256

    8cdcf3004d53aabc3e7ba23b2d4cab986328bff234471886953702656ca6a80b

  • SHA512

    0c7e73c52bc2f65dd3d818fddfca5f6125601912d69c2d6c478fc3c2d5f348016d3bbab00d33f574e524d7db88b36a3ab3908a06f6f9b31058c0ef346b0f2bfe

  • SSDEEP

    196608:oHFHWH8c8wfpznpzuM+IjkpHVL8A74W39zgbf0KJ9wqnP4FgoT7/EwsM46kfAy:CB86wfpznpzPNkpHV5cWtzuzGqnjoMMa

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 5 IoCs

    Runs executable file dropped to the device during analysis.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Requests dangerous framework permissions 1 IoCs
  • Checks the presence of a debugger
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • net.playtouch.ballwall.xsl
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Queries information about the current nearby Wi-Fi networks
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5235

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/net.playtouch.ballwall.xsl/.jiagu/classes.dex

    Filesize

    6.0MB

    MD5

    9f88e36fb11c389a67adc59c0a109532

    SHA1

    7cd88d6af1398c40f6ccd0a0e406775dd39f4fa9

    SHA256

    315a8692ef6b7fc989a617487d58b820a6217d6d1294cfbd123f9ee9a2e7306c

    SHA512

    c7a9f75cc3f694a6068ea44fdc1b5b40f6919067ef7f50889971e531ad5f7f33262f4234d324fa49445818111252bb3e6a2060778fd4612ce34e77ee69712795

  • /data/data/net.playtouch.ballwall.xsl/.jiagu/classes.dex!classes2.dex

    Filesize

    4.1MB

    MD5

    aae041a0578ca88874d897346dac0f6b

    SHA1

    30a4622c3b45b31a9c63af143e5813e892dfb68b

    SHA256

    24c7fdf0d4cd551f931a03513b8ad578d492dc415ce346f034cf37a2076c71b0

    SHA512

    cb6e4b3bab864c84b31222eb2ad6c89b6b7d4cdb679c1b67f574e3a0105131f302d46c1bd48b4344d896283740f09d42b7fdf628fa4769213ba8f9890cfbb2e4

  • /data/data/net.playtouch.ballwall.xsl/.jiagu/libjiagu.so

    Filesize

    487KB

    MD5

    610a895c4a71bbeeaea16eddb1422bbf

    SHA1

    9f919de42ed1e80bfadfef48f8202b202166f869

    SHA256

    baa349e9b5a47be21b6ea00ef2e0c0c5dc203c0e4c391dac46df07ca9d333217

    SHA512

    ef4173ba32309ef1257b75bcff28fd44ab14398577b4fb3b6b95323035c964201ed39546cda3b7115ba5025781f3b9c018443e7932edd50a25b1be60359f80f2

  • /data/data/net.playtouch.ballwall.xsl/.jiagu/libjiagu_64.so

    Filesize

    525KB

    MD5

    198e8f0e9b0d80997fde430f9973c1a1

    SHA1

    dec0b84b06072ad07d44b445d7e23587c0bc7f02

    SHA256

    dc9d0faf8652513f0a1eed698b9559e0bbfaefe12c203d239f551ff557abbe5a

    SHA512

    2868fc26e0bbc32e6f7c7d6e56ed6e9517d0ea4a7d8021a5f50af5945d6ac27fe87f500e32eed5143f37d484ba95fef481c9d5c11b652bac2a26d267358252ea

  • /data/data/net.playtouch.ballwall.xsl/app_analytics/analytics.apk.tmp

    Filesize

    545KB

    MD5

    4f6ba7835b8b8aff7f7c7a97bc262b34

    SHA1

    2f9b2433c46ed5ecd9c1d8dcf708d07340eb146c

    SHA256

    5a0062937d99f0b85e6fcfdb162ce6224ed0635cbb8cf6e3ac253d57fd8ef97c

    SHA512

    14a0ab2048b3366bf3893eeb3c8f978deadb1d28bff5c1918976db49dfc62307eaf7fcfe843d0f3696d175df7710defe120273cefb6221ce2612b14839536f40

  • /data/data/net.playtouch.ballwall.xsl/app_mimo/mimo_asset.apk

    Filesize

    397KB

    MD5

    015b93140e10348bac8bbe9c1cd26e55

    SHA1

    96f545739c8ae213c5afbc97e1bca4ef0346a100

    SHA256

    1891f588d5d58f90ce8ee77afc968279aef9011470ac5a172ae3066093e4a0ba

    SHA512

    351b4fdac4cd30a81c5ae593583c7412aa931632e3fcc20062fb13c8d06c3e286bc8e8468d6d2fb753b0cf12d21e3614db38ddbc502cf0c8de1b1abfd4f6a055

  • /data/data/net.playtouch.ballwall.xsl/app_mimo/mimo_download.apk.tmp

    Filesize

    400KB

    MD5

    3e86b24cfe8ea3644e3a6bb2f3bc75a1

    SHA1

    7881136fb412166d04ad5b6c4fdb9550a66fd99f

    SHA256

    1b01837a2b9004309bff95248adc60d39ffdadc90e52ebf645b2c5ce76f28bc7

    SHA512

    40ec714867b4a3e0aaa920abb648f331ce43e8bef442e782eff5ebaacb1052785e681c23b85f6ec50bc4e57e5b9924e61ca4fd72589f810ce8c670b5094b612b

  • /data/data/net.playtouch.ballwall.xsl/databases/analytics.db

    Filesize

    24KB

    MD5

    9692e98d6b1a429b4f3608d06bb7abab

    SHA1

    da9cf8f094f0bef0ee72a7547b0e7effff188452

    SHA256

    015a0353431369b2ff2471d2629111f041d1c4deb338196c178390519363f98b

    SHA512

    cfec4277edaa587b33f96d0768f3e0af81008690ce41267fa79a1505a2db36d12c586bfa48b498de866166fa9b05449fd835cb0c71eff52e1e071f9ce6b56157

  • /data/data/net.playtouch.ballwall.xsl/databases/analytics.db-journal

    Filesize

    512B

    MD5

    649137dad683e4df2f7ea4664b61e2ce

    SHA1

    e59bc1bd9e6a0cae602a73ee7819076711db8488

    SHA256

    2043bd27ad5c744d6272a73c92b94c9abe98f4b6cc2d0d5e477c0e1c858d3566

    SHA512

    d24e52cd6c3b972f44ec590727faa3d66ed4c7cec7dcc829a87bf8037414e8b153bb7d8afa7d045e10b53ac3e912ad7f519d251b4009985d85269d23fcfa8d47

  • /data/data/net.playtouch.ballwall.xsl/databases/analytics.db-journal

    Filesize

    8KB

    MD5

    ee1e4cee7b3e4e74410c85dd0abb6852

    SHA1

    0e5231a5a967c04bbbb17d87a421dd4895670699

    SHA256

    66ff3c0ef2bd8df1bb8e460228b0412db7266a965a16f73af2647cd64f0d37b8

    SHA512

    e3d13243944b015962bd092d743120379599a8001e746584e7ad04b86ff34626ca932739847b4eaa4e608ecc5fa565aaa3b5899cd2acd6f9dae1a17c0402f0f7

  • /data/data/net.playtouch.ballwall.xsl/databases/analytics.db-journal

    Filesize

    8KB

    MD5

    fafd516a218c810a5c8f49b4e47a889c

    SHA1

    7ba4714e9fc18ce3c680f7425c4e183e25d24bee

    SHA256

    a592dfe637a5065f0dfb981c8587df1363dce6c0c146a7f40f6c6fba1a8245be

    SHA512

    09e58a2f4c144774246581631a7dad98cfc787a2cbdb4bc108ae1ca339a625a40e4f29a88730e9b5980f69576a22fa5e21c56e94956e00becfcf21549eb59021

  • /data/data/net.playtouch.ballwall.xsl/databases/analytics.db-journal

    Filesize

    8KB

    MD5

    81513cef9656738e0dfe991fbde70d48

    SHA1

    828b9cda234b93a9e0dae3e91a5f8fd46be08c9b

    SHA256

    57450c3af1104c7ed8664cc1de3973f31c3078e3c607627d5ba0ac7d0445b6ef

    SHA512

    9b681e91b9401d48132a423a54eab2a9f5a52dcdb844cf8e0ad9ed446f2c520d897f1deec7743989d9c6cf99be76404797f66f7b1a805610ecba7c09187f9588

  • /data/data/net.playtouch.ballwall.xsl/databases/analytics.db-journal

    Filesize

    8KB

    MD5

    175094aea1b6b1095900a1c432e6cc7c

    SHA1

    9c4590a3857b30456ba742aa1efa770ab9f05de0

    SHA256

    9d7f123809e7051210e75e125d3b0d575578fdb41b85b56cc17dd30b21e2a77f

    SHA512

    548c659655a3026ba7bac74de3ab3a2a5487f7d74269247ff6c6be9a8af2d1a35fda3879e31087378baf4b7004af480a13d96222067f91a5a0eedf2d481bb82a

  • /data/data/net.playtouch.ballwall.xsl/databases/analytics.db-journal

    Filesize

    12KB

    MD5

    fffa942fd3f2b92bdbed7b46aa81d1e5

    SHA1

    011a16a3490f898395d0d08630d1fe8f8b951f2d

    SHA256

    b7a32ac339233579184f1a94f8a9ea02d6a6c2d69525ca50feabec1448628c7a

    SHA512

    6e57fb11a7e68da44a27d662523929fd35691e919e2ee70a552975040da9f0b94d84eb8d1d59656c319789ffa620d499e2517a1a7c8370af584b6bf06632c982

  • /data/data/net.playtouch.ballwall.xsl/databases/analyticsv2.db

    Filesize

    16KB

    MD5

    862df7baa0a1975f19d407cf7d36fa60

    SHA1

    299cd93a8b824739eeb51bff8446cd5aeff43bb0

    SHA256

    aec3e4bb8875c61a90acb28e2ad2c3f5b84209dcfde58af71957d5f0fbff22b9

    SHA512

    04ef03e0625662ca9cb4c499c0827b977a650de8f29720a52ed34dda073890e83e5b5d4f9f971080e9322c21884def017fb0c586d7d877a22f0c9deb16afbf23

  • /data/data/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journal

    Filesize

    512B

    MD5

    96314e6b88568908b3a16411c6f5dc53

    SHA1

    8e9449b2901e499e55a48709ff3ad6f69a514fb2

    SHA256

    c2d877066b62c18185782d1595dc90149a118ee4db8ea8349bb7267acd1e9fa7

    SHA512

    ada676d73b774c2b008ef33584ea4888b9c07ae1d30b4338a037f472db8d9d86808bba2758946ce401d4daf4eb6f60f1844786df4824499242216a1b10be8faa

  • /data/data/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journal

    Filesize

    8KB

    MD5

    75dd6e97dbde21963df8f2994ecfb432

    SHA1

    34d4f59d7fa9a3026cb68d283e66f55600996151

    SHA256

    223f05926082a4612b6cf4d1f4822932c40c0b457f7e9488624010ed3e4f1169

    SHA512

    8a0858b0616f991984591f647d6edff18883efe91488c6b66477e38540d1bf5bb3f29887dc135c53fa4b903999f1b28f50a33a032c5e4507788870c021e6d0aa

  • /data/data/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journal

    Filesize

    8KB

    MD5

    cab85aba0228b405dd44f7a086fb324c

    SHA1

    52b8ea06793d399d7355c3776563028b9ac987cc

    SHA256

    abfe229f9eab3849ede77b09a4e046c8f0b2163e1a01e790303d666e5154d6c5

    SHA512

    0c2cd3204429743fec30155f8d11c67542c7369aea3ba74d123653a574c71696cf3e638d602dcebdc282474a3f0bdd5267b29c1ba42352a19d403e5bc8daa185

  • /data/data/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journal

    Filesize

    8KB

    MD5

    3f6901c15e8048d84a492c2cad863e5b

    SHA1

    801eccc136ef9d99bcb49e67b6d73aa510402ded

    SHA256

    ebb27aa081ed35892d6a2e13131bad708b675ffe0cf38b84e629f4260148e076

    SHA512

    b76113d5cb92bbbdc651efd4de5a02a47937870f887c248a3e703ef35e30154f440f48d575101948769809f7fce6d7f9a5fd08b20d03b6efd9808b0cead5b3d0

  • /data/data/net.playtouch.ballwall.xsl/databases/reportServiceDB.db

    Filesize

    20KB

    MD5

    2d4a0d6d2f29ecbedf642a83ad8d1b37

    SHA1

    195b82b0dad0eb27c01957eeeb9680fe81b7e042

    SHA256

    ef5c6406b13e06831219070efb7837f28380ff01330a31fb35e0c5abf6634201

    SHA512

    7300d3db8475d1182f007b52aa88ca45022f6ad172f00f9ac558970d8cad2fb4c84c7bdee298b11f58f61ad012459e4e8ec977603723247de4f5b0520ee75d68

  • /data/data/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal

    Filesize

    512B

    MD5

    cd3a91849fdbb2045b8d901f5169af4b

    SHA1

    b560e2df65845e903222b92e4fd2b4d825faf32f

    SHA256

    5acd044320d1f8db4e53ce6e4dd1b6fd50714d551e5ca4f8626e500fe94a6dea

    SHA512

    64f5d278fd7589efcffa1ef065d96657ff9b4546442f5d8cdcdc9bbbb9d5d57504152099e5f4452eaf6d420f50a4103d33a6f31629b7fb3c97515508c9068bce

  • /data/data/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal

    Filesize

    8KB

    MD5

    083a447f9325bc7cb220a69645dbaec1

    SHA1

    dd505562c6405b271bec68af1dd0b0cf65b2a832

    SHA256

    b5431d5b2b91933a7efa9bfea05681579cb347ad2ce23dccf000066a841dba00

    SHA512

    d8eab3a65bdec1dff52f6657489b150995175295b041dc15679f5f66b193522a3bf6382ec0ed8ed4a49597b1a58327c5d42039270f6b6e4b44a7fd3a549b6f1a

  • /data/data/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal

    Filesize

    8KB

    MD5

    12f73f05d73f2e2a6f4a551b8945e4c6

    SHA1

    82febc2fade03cef3df075626aeb72278bae0611

    SHA256

    4bef9a770076bb21afa5e96595486b56dbda4bf505dcb9191ac35a2383c42bb0

    SHA512

    4a1956a808b8f8333c6eeac844be65fb709ad01cacfeb11843a046bdd3d8dcd7b27f8444f5fc6a59f652d77f1e9b9ca8606e7c54c6667735325d3a0ac327a013

  • /data/data/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal

    Filesize

    12KB

    MD5

    ab06067ab1120dcf130da08e373bf6be

    SHA1

    097f2820702e2fbcedd3ef9230ea5c9a1d0c2e10

    SHA256

    5d364b6694940bba2936e581626339ce567a462b88b8606e8c9999e3492f89f0

    SHA512

    3dec2c193a93acb909b0a154a372152a0382d4807be194978c1a26b8bdba0bf8462b05ce979f925af48e49b5e48695b50b45376712a86114d559acecdccea49c

  • /data/data/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal

    Filesize

    12KB

    MD5

    43716bcc3ee02d1b2082abd814683bbc

    SHA1

    edac5a4e87c5eb278f33fdd31d014575f72b6bd1

    SHA256

    4af3560fb989e4a6294685812dc73c097678d1e52d50a0bf286d7e8017adb4bd

    SHA512

    f03e917d8a7067f31a5140791a55e9235125f439c5c5f20453a59074441a380f5e8021b49f5f78655f9f111da8f22116a178546614d6d97fd7518d6f0258f87f

  • /data/data/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal

    Filesize

    12KB

    MD5

    8efbe13b9042df1ad2dcfca93da64d9c

    SHA1

    98f3433c213a522bb77aaf0664a3881c2da6408e

    SHA256

    b7519752b412eceb47f1f33b9d2fb3799d89528bbbde5570ccf49ccae1ca9382

    SHA512

    41627782cbe6561014c2fdd4864eaf10df1dddde7aa1adc12cd946ea70dd30b1037371c707e0ad753991e022b3dd51833b71478b70c77f1e47955d098e53e172

  • /data/data/net.playtouch.ballwall.xsl/databases/requests.db

    Filesize

    16KB

    MD5

    46e6d260aad4939e6578fa547c8128a2

    SHA1

    389dfa55d720f3f8255a87e019855ecdd4a31590

    SHA256

    ef19573174dd62a5a63a6aa2db6bdd508173cbd8ead7b34d338d91a7ae9308c6

    SHA512

    107e4dfe13bab1e70011db5f56415a886f06664336dfa8ef2884556ad1c0e18fed156be320bbc12282642de4b1125756757ec22e225ac3b47c1a7e17b823a581

  • /data/data/net.playtouch.ballwall.xsl/databases/requests.db-journal

    Filesize

    512B

    MD5

    08ca181a015afdfbe3a4628dba621634

    SHA1

    1350814a992213beca81aec78c4d96c7ff0140de

    SHA256

    afd7e7fb0832f668d2c382c916c7363297df023e065b5557fde1118bfa0197fc

    SHA512

    09f658cdbbf795ef1e4b0df65fe89b511219f5cab44a3a6bc331a96783f5f9f9c00fd7bdb8264b6fd2a63cc7eec5c47d73d433630e3344e732a76bc38527cba2

  • /data/data/net.playtouch.ballwall.xsl/databases/requests.db-journal

    Filesize

    8KB

    MD5

    e229207553fbd3718744f7d219de2d79

    SHA1

    7236dac2d597f464f8fd47addb6b69817db543d9

    SHA256

    9046c1991e20e80ad01eb0190fb07f88735b79dfe273f39b538f073273167ffc

    SHA512

    1b3fa0e2a361d0fe93055d371f3dbe917f1919331e55ef7904f59e7c9cceeee632d61518ac7222d9dd449ed8d12cf96c78bf872e32371d63a86dbdfc33fb6150

  • /data/data/net.playtouch.ballwall.xsl/databases/requests.db-journal

    Filesize

    8KB

    MD5

    62bdc08ea1bff0d6baccc35d15393b66

    SHA1

    e7773f543835eb19a55597971e28c15a0c5cde70

    SHA256

    f294c6b05cda29a93085ae6f54fb31f1c210bfb8a0a3fbc71861d7f5837157d9

    SHA512

    0108a87a99a28c725baac532fa5aed0d79fc20f82822e2c5c7a84c05a21db418604e54c294336e38ea0baa4688d3db37c837ddff0336a3054aa378896a317fff

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db

    Filesize

    36KB

    MD5

    b7036131b84bdf2b66c67fde18d62308

    SHA1

    18b1e5a358d68c846495cab5cfef7c6679659093

    SHA256

    c2c0bc8842203ccf1665dbb5b3333b22ae5a6ae3ef8eafe83e7f43adf32d0295

    SHA512

    256bc83e1a516a58f5d1d024d27dad3c26723df0f96e0deca6baac86d84518000212570b06996a14bcbeadff05fed05125862aba2d4aa08c15a6999563dac067

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db

    Filesize

    24KB

    MD5

    79ef85cb0b6d8f789a14a76c6b3adef7

    SHA1

    0adf0c0a79ca585c0f14a2886501674da00ae837

    SHA256

    7337137edd5f6601136a1939b6612a7716ddeda2a2ed93592e1e4528815f096d

    SHA512

    24f9fe2f59889c50dbf2cbcbffac8f731f43b0a6b9f22d989e276b9c5a78c844b8223f76c8d0e9771235d74233d85dd69047c103b01dc75eb8e543ff1ab2fffd

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db

    Filesize

    16KB

    MD5

    e53460983dbf2cd0e104c31c003d1d53

    SHA1

    048365199e988a67e9eb239d6072260a6c8e2415

    SHA256

    e849aec4f2bef3ccd9aa69a7eda0cf1e8da0d362a8d685d68f6ebbd08a8a466d

    SHA512

    9da9b1045c95b127476e8e599e47d06cafe122dbdf67763d687e278f6f21d7b2d253224a877f6a569072c8a3eb43cabde8935f53e3e97a90fefbbca53b8cb9d4

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db

    Filesize

    16KB

    MD5

    fcbcb76003e0c825bbc298bf79f7e40b

    SHA1

    68656256a3d45073eb49ccbffdca83df210a0b45

    SHA256

    930c72c494037b20699bf188fd9f7f0991d71ceb730f56b0343750823a3bf163

    SHA512

    e21f40b04815faa153fb7d5488963dd034c678fe08e6be4ee806c19e91deb8a384e2a07c6149aeaa3756d02f275e5ca0f88276c9580677fb290462beb2fa3854

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db

    Filesize

    28KB

    MD5

    bd08fbee8e294cfdfc345287ffbfaf6c

    SHA1

    14c02e53817e421ebdfdfcfe068115adf6589d4c

    SHA256

    10f02a0f097d34b6cf917499d382df1aaa6d1cb2b0431a4b4aac5383f42d837a

    SHA512

    1b3cfccd1cd5453eab722294a800d6be62c75ee95dadd69b1ddb04cfd9e33e7b518348bd51e00e026e6070c695e7cda939910bf6066efdd1edc2b667dd8af2d7

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db-journal

    Filesize

    512B

    MD5

    0c9ed2503c7162deace8e4091f9d32f8

    SHA1

    349ea7fa59c0c92ea72def2f9988ec8e3a98eda8

    SHA256

    4dcf5726611d921c0f1928a84c12ebdef4b50e43152894555dbbca958084c8f2

    SHA512

    2788fcd7a9f725717f2f184a25d916a3463097a7b5481cb11807bc72ad7a64d38273dd2472e3a72afd8ff3f0b46b1657e32c67d07dca14875e0d02b4a12cae28

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db-journal

    Filesize

    8KB

    MD5

    948e74976bbc6c9b4e90e2b0f94dfca6

    SHA1

    8efb3c8936701e13da1eeba19c2424ec443bcc75

    SHA256

    42e4ecb8166c2b3d0fc1ccfd4af338a8f31bf5f1202207fc3ee935c3f679f8f1

    SHA512

    d5906e31f776f1babea46c89e78561489efc0fd16a37e67c4ccb24c09966d1868860338771b45bcf6c6c5695c559921504ae4528357a03967f44ce17b4d2c766

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db-journal

    Filesize

    8KB

    MD5

    9888cff6187e643277c1efaafdfb82aa

    SHA1

    92ec0f850c965e74f55944eb42feae9c161568e9

    SHA256

    b31902c2e4b0f80edbc8c30d66046a895667d308f8f68d323f47309e882d6667

    SHA512

    747b22e6535b96a431b0eafc3dab5bc22f44d45055024aebcc4e8e5de14cd87fe4d2bd5bf2ac8b84ff22a88d7419fb294cb390a981082dafc0f20bddea0f12b6

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db-journal

    Filesize

    16KB

    MD5

    375b6f156145610991659173fe1f6fad

    SHA1

    3ac1423330d0371bb913279bdfb45a72e39d70e9

    SHA256

    1da49a11ac04949407436fdda7fb95111ef20c75df279060be4f8c0d989f1804

    SHA512

    935d50f43e1dfc8db77a1a87944f59f6c6a7519ad57cdca2d66b88dcf5afd0a28d3f942a146874538019244ef2e38162ba91bd83cf3c96bfda57eb8888daf6c3

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db-journal

    Filesize

    8KB

    MD5

    a29a8a61309387fd0c9ec25575696d54

    SHA1

    558c24fa24e977400d90c7f07725a10b939c08b8

    SHA256

    a6aaa8bc2c02061a9d4cf7b5fc3a38a2524961ab91b45c5efab5c567e02708a2

    SHA512

    ff3b8beabb6480dc29bedbb572d03b626794a257d1794dab2f28f579eb8582c078d7bddad3af90538a7063da8e8e08dbef0a9cfa4e2d501f16195c7282b28f19

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db-journal

    Filesize

    12KB

    MD5

    5a1d290ed57b3e8f45a0034c80b008a6

    SHA1

    e6bb03c4fdfebdcbf450c5ccabce5735355a0d38

    SHA256

    705367061146c535a4d6f9eaa69b954a1a1f78398dba5eb2f65188c6662ac661

    SHA512

    6c9fe5955e218221cfe36a76084300a722c09e0efdd74a083c597de604f84bb0a9f7abd5eed12a08167de336246c7ecf5d3018bcf833f69250217d7625ff5436

  • /data/data/net.playtouch.ballwall.xsl/files/.envelope/a==7.5.3&&2_1716303791859_envelope.log

    Filesize

    1KB

    MD5

    40b02728a0630ab29b874759814fefbd

    SHA1

    fd307a6cdaa8e66e454a15dd65d5d32f9b2ee2c4

    SHA256

    989827f5ec58d75e26b463dee70b9a7defeb0dc2832fac9f9064057dd811755d

    SHA512

    0130c29217fd8e13e4c1953fe8dbf60b2d2d87981646992421d6b78838b2ce79cad4cef8baa9eec0a12e2704c2aef21808161471026a92c086a41b84216c96fc

  • /data/data/net.playtouch.ballwall.xsl/files/.envelope/i==1.2.0&&2_1716303796985_envelope.log

    Filesize

    2KB

    MD5

    4ef6a57227b9106414bf7dcebb728c3f

    SHA1

    2157b984f6ea5c9ad78446d2afcf994b4ee36e01

    SHA256

    5752d7a7f3aed923e01741963ba12277d0769af3daf5c09fe43227c76036ee9f

    SHA512

    785f02af9f037faa9f9243aa2580bc2a5e4c01ebc8327ceef2b23e4015cec768f8d13f0cf55c6e6164e5a1160805388e8ce8934230061ff590946c7e1cc095eb

  • /data/data/net.playtouch.ballwall.xsl/files/.imprint

    Filesize

    979B

    MD5

    aeaba0070f5fea423e4c883ed7932e39

    SHA1

    49a3183ccab15bcd8ab0bebc2aa37fb3e81c4a11

    SHA256

    d99467e1d982c791c8e831ad17e61d456f11417774e48edcf8d4fdb4e7566582

    SHA512

    91448b7b1991e5c50f52236f18f3211c25221a82ac8b370b005cb7c7b853e33962d9bf89c381819106d3371daa80f43540f06b0df9ca6e43a481a3eaddfb026c

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.ac

    Filesize

    40B

    MD5

    612cdccd3f37caebd6080e923243975e

    SHA1

    2be65605d009dbcac245635497e2e5b884442250

    SHA256

    843bfe97864ca5958e6ee703adf7a2b6f1c8c4dbe1ea97c788b7a8e59b2404a4

    SHA512

    769d58f949b131e142874f6fb2beb8eb70be8ec0f7de30f8b571914cfdf229fe8c49307387381efa6f108d605c70a7e7e09632305b71d57fc3e1fcab7f4e6761

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.ic

    Filesize

    32B

    MD5

    61c0ef0ebb425fa3037a6c57fa44107e

    SHA1

    a6b152e8ebf389c6d412fd0524332c60065342a7

    SHA256

    93a17b69ff6b983887962af592251401ce3ef8652e2d1d3213730fb01df91734

    SHA512

    9b04e8109fba5e93b65ffd4e19c7da9c5c9cca561fcdba413cfcb2f17d7005add5b302d0ed294e76adf448c87b679803aeeab747ff14a04ebfd74c36bef8e4df

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.pk

    Filesize

    32B

    MD5

    46fdca5332753dbcb18952ecbc75762b

    SHA1

    e3de3dc3998f1789dcb6726ab2cdc846033f1dec

    SHA256

    9ede73268241c57163718112261e064bb0aebef90203e8513bd6897c6c330f2d

    SHA512

    1db7abfc68962e467ba8914c34096dbeba0351f17338ef5fe32cf6a01343a1e64bb9735e39a19809f83b6a0ecf23870f21d11b31556168a2dbf39ce704dcd52f

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.pk.h

    Filesize

    64B

    MD5

    40447a627f32ca9eb3fb97c467d972c7

    SHA1

    f1f50c8ea8876b87dae7561dbb8879663aae5701

    SHA256

    7bd9767ee41d51a64f85c0b1926558213bb5db9f8189fd899d8bebbd614ecea6

    SHA512

    c51c5135aa1dbf5644c662f17962b4b3b3a454d09f015ac4cd59d21544111f885fa738bc8d683baef31cdb2423da3001f219817b9123faf5ff6df2083b8e6c97

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.rd

    Filesize

    32B

    MD5

    edd609b21695ae1f5d844e1b7e492af0

    SHA1

    9998f1bb0b7edc82e529afc78798aeaaf275c9cf

    SHA256

    7dad80939d7949de4a438ede9d7118e975f97e88657a3c8cb079d4adc652c9c4

    SHA512

    98a403fe63427a7e327831249726cdd84e8ab74d577336759fa50ecc765fb1abbe597d30db440950bdf506796e90b6443c3222a14be29dc372ea81eaca26a544

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.ri

    Filesize

    307B

    MD5

    3ac2e1835384657ce62ae66a75aeba22

    SHA1

    aa8d4f19dde55925dedf77731f6f36bd8fdfa5b3

    SHA256

    8e26a83ce56e94efc49d3607ae48f98b10d3574bfd771d8ba3d9370bd26b8cf6

    SHA512

    0ec59b13f4e5f9605eb911b3a9bda6a1c480f0517855d2c4b42d42694e577520afb50708ac002a080b0f247d5db18256097bb99f489105061cf314c9e4937cf7

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.ri

    Filesize

    314B

    MD5

    5345a3fde15b4e1cf1b4132ee1c2e3bf

    SHA1

    750410fba7302ad131734f50299083cd193a638c

    SHA256

    1890725c4551a7a7f40da834a9c5ae12b1a27e411c063cef54efd6573e601dd8

    SHA512

    eeb70ebd456d5050efa5da616ed4c58404f7f505a084dc18085f0b2b5e42d6e0e4556c7194ee3023f10279d4d1aa5dd198bfb2ab3c815a971304cb50e406fb7c

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_cf

    Filesize

    32B

    MD5

    bcfdf07e96a3eea4466e54677ab3e889

    SHA1

    78f70c653aabd31bdc0e98bf416d725510d7446a

    SHA256

    11f6809bf3d8e0e8a5b6aa8832cca4c77b620e7435a297ea5e580fab843dffc0

    SHA512

    b77e9b6d1044292f8d1c7620cd5e740f03fdd6c717de1bab4b94aa9e8898072e95b7b501ea43daf254447262fc44fd88467f6e47c39682dc97bc19ce99b16b41

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_cf

    Filesize

    54B

    MD5

    6b3a36abc2b3c780e75a4c0faf34049b

    SHA1

    4a75ca1a7e0d9ca30cae7ce7392e8b2ebf6115c8

    SHA256

    25e55419e99ab313e3355c7aed025d8ad3d7ee149b461d7fc6e758c1d8d36966

    SHA512

    d4d46a6905941fc84117bb7cc6bb99c53a19f11088bb4efcd6a6db68f3b264a5d90314afba76bfa1d20b1668f32a576206e95193ebaf6db83a9b3c8ca3ca849a

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_pid

    Filesize

    32B

    MD5

    e5d6f7972c53ab0e5492bc3272f10d55

    SHA1

    c28b3afebf0a0eaa2ef42a9ffb0e49b190da9507

    SHA256

    2fa9b6ec04aed2f09d6bfe3bf1c600e68753efc6aa3428d40222a2eff998118a

    SHA512

    60c2c1de1c8b67a31f95e6a17917b3df58a38e204b646e8af900fa5d7ec07e4fc7907411d3824fd34d8a962c52eee75d643db9ef12f8824d2b1384a6f93704d8

  • /data/data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_pid

    Filesize

    54B

    MD5

    a3016c183e83281f1aacb5a802915251

    SHA1

    bfe80a0dfd5fdfdbbda0fce3cf841fb3e06c3978

    SHA256

    9330e5cebeaf9615a49f1d745506e95ed59bf051bc1453bc20d73868ed075bcf

    SHA512

    9e3e3d3961c1095d5b2313421076b33dd74ef67a56f90457e63540b833fb64ce21af1f0dae5ba2fcb69a6113098c154d85d3055638a6e44b497209f4eac2e019

  • /data/data/net.playtouch.ballwall.xsl/files/.jiagu.lock

    Filesize

    27B

    MD5

    c21c244e9e952ab687948f21d549806c

    SHA1

    6870b86dc6a19f9a1c46494ca66ef376047ba5dc

    SHA256

    88db43d50e6a3386986fc2b87e0efec34e2894a5d170570dfce8bfd9af3fddc7

    SHA512

    12e7b5e951f94a21736c5127eb4fede6731e5f319ff0fbd91001cd2a7faef43e04bc204111360c31a218ca1a50c339cd2d1854fa171faa3c821179d32bab2577

  • /data/data/net.playtouch.ballwall.xsl/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    448b5b55301e4f99141722c80c6188da

    SHA1

    df15444af9ddd5a395d02512657a3b7eb835e5ea

    SHA256

    8c3a5b1c6c3f42a0be4a806ffdb14f464c697a14dcc94472bce2fd756feb0f95

    SHA512

    353f7a2719159a54cb987d4d1ce30e4c9a1f35228595212b5afd0cce46917519e21b0bf0d520d8bd0f89b23bf0f8d7e819cc05f2f361b0db1efb684316e5961f

  • /data/data/net.playtouch.ballwall.xsl/files/54db829f09424caad69f7fb9350fa48d/policy.cache

    Filesize

    12KB

    MD5

    f0326dac3bd2b30f8d216ca46622eb2e

    SHA1

    e34cdf9529a96288d206b07c5078afb012be5b7e

    SHA256

    c59de2f2197323aae35f444e18f7f5d7ae2967cc486b0297bceaf329ef8dfcb7

    SHA512

    b91250a4e5cc4c2464657d7d625a3d19144b321fbc091041bae340dd8f7a27712dbc0c5961d50bc039471014c568fb06df9b8305f20e4ad08c65894e56b4c49b

  • /data/data/net.playtouch.ballwall.xsl/files/5a0d76b426bd66bf94b94e19a8719e41/policy.cache

    Filesize

    1KB

    MD5

    4d4dc628d8a3facc8c167ffbbb0cab59

    SHA1

    6f28c74730b309c7536866b5aaf04fa69d95b105

    SHA256

    742d07ce2cfa3958c889ad99e422f8eb063b824071fdd072e56a6de5c8d325b5

    SHA512

    59843b5081a0f9dd353159ff0dbf07572cb44ecf0393798558f2f1fa054129902e8dc2da88db38565ddb34fc6857ecd338fc4f24f6c50992be638793e5554bad

  • /data/data/net.playtouch.ballwall.xsl/files/AppEventsLogger.persistedevents

    Filesize

    402B

    MD5

    125dd77d7f63aff936afac2cd5769ec1

    SHA1

    b4e5e0d6396be8d6cc29532db8074001b218cb32

    SHA256

    ae790c947b53259c7eeddb6d0efd29b625414e00932366dfe9c016da53554db2

    SHA512

    86dbd3bd1982c7b56cfb7bf7d0aad41e446cdd858aed1216fdd6d5b76b962a94ad8d0ea4ce103548dcbd226339fcffc9cc23b72599de4ea49fe4e0fa8c5bd616

  • /data/data/net.playtouch.ballwall.xsl/files/a194a0a7214f6cbda0672045c51505d1/policy.cache

    Filesize

    13KB

    MD5

    04ecedd182ec514d1a60d8d2ac199148

    SHA1

    3cc41071881e11ef4a5e8500ba83eb91e0502aed

    SHA256

    690fff1587a5f29c71dd12bb95f7c8d0d25518679ef90c9a9adf8c69ff5f18bf

    SHA512

    27a2e1ea979a0c3568064028558da583b72cdb5133442cbd5434c497ba0d2ba7a0a0445dee5657c4ec277af119b820371e03ac4c799eee93731b12379c491837

  • /data/data/net.playtouch.ballwall.xsl/files/exid.dat

    Filesize

    85B

    MD5

    e27a2369aa7127845ef08f2ea7e6b6d8

    SHA1

    aae5816e400f86fda1869f24f6e0dce5e7fd4a23

    SHA256

    4a2d6045113c91b77e9d1b031efe51536a0427ad21afa1dd6e4a602d8dc4503e

    SHA512

    1fccb913b63ae84e6e87ab34d767ecd2bffc3ed9474a4ae2842156df2a9a65d3557b538a60456e09e66170b603bf1175602e1b792e32d558737466cb228c31a7

  • /data/data/net.playtouch.ballwall.xsl/files/mimo_res/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/net.playtouch.ballwall.xsl/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MzAzNzkxNTQ2

    Filesize

    1KB

    MD5

    e9e8d32c9244550a64d31d18da4da398

    SHA1

    b98c2632a18bdfcfae8de80d262965577873920a

    SHA256

    c9bc622f39bed71297aa59bb54a8ea8714caaf262f1deb593dd013d25c84d06c

    SHA512

    56b7452ea99d32ed1f3139e32b9321937910a432bc39a143212314935cb5286f7f7c8222dace2289a0a151e0f02f7238e6c93cba9d40a2602be1fc65b1510bc4

  • /data/data/net.playtouch.ballwall.xsl/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MzAzODI0NjI3

    Filesize

    1KB

    MD5

    2397424fb64e3e18a22c96cc0cff4bd3

    SHA1

    d94ca65fac0c2733610ce82c381cf2bcab7f240d

    SHA256

    525ea2591613c49e9e397c02dbd5160b228b43257519495d9649bbae66965aff

    SHA512

    b0f1a770e5ee690eeda1c801a8d4936ce0ec9d98be0324694237298b72f975f825e7c0b8a4585cf4f99de223e208a091fee4688e01524e3cad6bc4d155f082aa

  • /data/data/net.playtouch.ballwall.xsl/files/umeng_it.cache

    Filesize

    350B

    MD5

    943e02cba97779c0cd8c868585b89de1

    SHA1

    263af6731db09935189e1b974e44b1707c3c6bfa

    SHA256

    ad35ab147c92585004ac127340bd650bd94829f936f3a93608a78cc1b4e0300b

    SHA512

    96093c9e7fcf8beef7a02563d9242d1554da25aa4b07c208db85a70740c378eeb581bc2ca1b8892dafc78c828ef80fb28b20574060760734ba2cd92a823729c8

  • /data/data/net.playtouch.ballwall.xsl/files/umeng_it.cache

    Filesize

    178B

    MD5

    8ccfdc86f4652dbd12c93beb32c90c2e

    SHA1

    264578a082afadd64a8c6bcf19c90e8cd81e3253

    SHA256

    5fb6a65ef30c35af06cb34957d4723f4405df93d23184ebb32d45ba483348823

    SHA512

    9453a220e4fd27d336f32e8b96b18f7d25347b1abe4526ef6a261f25ee80193b63578ae329d18e2323bafca275f4c95a2c3f130a9143ece69555e5be7c2d2a77

  • /data/user/0/net.playtouch.ballwall.xsl/app_analytics/analytics.apk

    Filesize

    1.1MB

    MD5

    36e6ce6a5a4e2b31982e3f8208a1af0e

    SHA1

    a7418ca9cdc61749e4c39e55cd4e74a0871ec196

    SHA256

    ca10a9f91f5246c09ab701368126bf842e33e62c0559328b34fc91295c13d298

    SHA512

    ee5022a46bc98db4be250a219a805073d5e558e5f3377de5d5becc5c3584f20988667af5e209dd2525c40c9fa70c8c7fac18eaaee98957b79d96b20a901ff100

  • /data/user/0/net.playtouch.ballwall.xsl/app_mimo/mimo_download.apk

    Filesize

    695KB

    MD5

    c526c06b92f76ffbf2bd3232f1053284

    SHA1

    0e9d0fbef236f8807f20d9a14c50ddfcc1736b52

    SHA256

    fae59c9be4e17b082d213c4ff1c7873cc7175b28f7c6664f8e8aa8280489017a

    SHA512

    8a4da38bce8ae67d3e8de8ce44d63b0ae96f9f12321bc8f84b623a0fbc5ba4f7bb87b18141dd8a64227debef3be72f58b0b76636c5d71a217891f78f3397831f

  • /storage/emulated/0/save_data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.ri

    Filesize

    307B

    MD5

    33992343f6594ec1181727db6e1b65fa

    SHA1

    33ff5fcd71d2c821110c691a3a241cc3159bee9a

    SHA256

    9e8df1a1f80d43f79be6c98736292839d4928f6877abac1787758478ccba6044

    SHA512

    a63cda06ae9d0ffd79ac9e5fc6a42e5863f6ad5565ac6c267615ca7b30be571c89cc217d17698064b40527e014b498f5087888c899b681a260e43f09146c2fe5

  • /storage/emulated/0/save_data/net.playtouch.ballwall.xsl/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    234B

    MD5

    b639072801f3465c57a3b63955a81525

    SHA1

    030cf78cc28112bcf9b39b8401dc29d1272c3b41

    SHA256

    d4f2686cd735e0f53cbad1e6da8997207b489f626766cd428e737a185548194a

    SHA512

    78e7b89ba935b6e0c4ddf5563d8031f67396b2e437b862c0ebee36ef012151c0954637624626e2fe7202dc1eb69c2d8b48f9e282029ee4a5b76533f37d305c0c