Analysis

  • max time kernel
    177s
  • max time network
    183s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    21-05-2024 15:01

General

  • Target

    63b63ee21d966bc71663fbea3aa118c2_JaffaCakes118.apk

  • Size

    11.8MB

  • MD5

    63b63ee21d966bc71663fbea3aa118c2

  • SHA1

    e98ebfd5ca33f46e43666d57ccfdf35c51f88618

  • SHA256

    8cdcf3004d53aabc3e7ba23b2d4cab986328bff234471886953702656ca6a80b

  • SHA512

    0c7e73c52bc2f65dd3d818fddfca5f6125601912d69c2d6c478fc3c2d5f348016d3bbab00d33f574e524d7db88b36a3ab3908a06f6f9b31058c0ef346b0f2bfe

  • SSDEEP

    196608:oHFHWH8c8wfpznpzuM+IjkpHVL8A74W39zgbf0KJ9wqnP4FgoT7/EwsM46kfAy:CB86wfpznpzPNkpHV5cWtzuzGqnjoMMa

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Loads dropped Dex/Jar 1 TTPs 7 IoCs

    Runs executable file dropped to the device during analysis.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Requests dangerous framework permissions 1 IoCs
  • Checks the presence of a debugger
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • net.playtouch.ballwall.xsl
    1⤵
    • Checks if the Android device is rooted.
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about the current Wi-Fi connection
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db
    Filesize

    36KB

    MD5

    4a8120c91e3143b2db43971dbc77cf8d

    SHA1

    37c5700d35059c4e0a718ced73b3d73ba5d2b277

    SHA256

    1fa1b6e6bd75bcef64d35785e2fd6f2e73dcdf92dce73c8b2a8fed49746d53bb

    SHA512

    465cd282927e30a0a894a75ad261feddde5a31869c8cea6b548362afce08fbb7cff7a784bd1d62c3e4c95916ce30e758d3919dd4cdc13176f29d68c2620c185c

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db
    Filesize

    24KB

    MD5

    ae31fb4199b0ee8d482b38c3d22a41e0

    SHA1

    b7bb08ba92bd035d0419535b35af1efcd8e0587c

    SHA256

    692effb8d298dd5ec0ba88bcbd5e078e335973dc189ca8913fb6d2853ce4114b

    SHA512

    d6609105be07f3f902f709dee6379517362c745523e5f805596a3faf9e89b358b98d70adb1a3c26c12fdeee0588e9435111ea92db937277143130da5db0d6ef2

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db-journal
    Filesize

    512B

    MD5

    a87d3d63b0737a16b13c8250413d6068

    SHA1

    665f15e20216027d97f886ba437a29ae91d227c7

    SHA256

    304c857a2cf031638c03753635b0afcfecc8ca60a97bf5a69631f43db4d51ffc

    SHA512

    1375fa614255456353b2390b64129c2deeb0b2e69d61d5b4dd447564cbf6ab46d85892a59d347aacec0e4c6cdd8ede740aa8c0c2b545a00957fb99f84e8bdbeb

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db-journal
    Filesize

    8KB

    MD5

    d4db118acaf55d4ce68ddabc6aa3d011

    SHA1

    2204c77652695e79a15625a219e87cc3221986bf

    SHA256

    9daa4357f77b20c536d8c1e8095dba4d9cf5ea332db112aa680dafb47d4e2b33

    SHA512

    4ca25d5eda88b936cc49f2c371fcdd022e554d2d80c5ff8506d11827753a48c1dcb05d7e3240849f28c1c81d6750d9ba2edd293af46a0f7a44313a9bf8b89592

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db-journal
    Filesize

    8KB

    MD5

    0096e47bc49174807d483d982b76339c

    SHA1

    7bfcbd402346245d6f7ae3e3595e13d52a0ac74b

    SHA256

    75a41c39145ee0a0ace4af3faea942b2fcfafefd03e84c5f5b53db287839d3e1

    SHA512

    86caf7bb2b2126a2b28fffa41b0d59fa16326460a720960ccafa4f3132f769832623369ca5d0f297bbcd3a2ef1f045bfd9f9c71c815fdcc2c30af82e2635aa3e

  • /data/data/net.playtouch.ballwall.xsl/databases/ua.db-journal
    Filesize

    16KB

    MD5

    00a5411a382c551b6d8213e4ab92075c

    SHA1

    e99538d87e46c2b9ca66b138b15292ddfe4a63d7

    SHA256

    71379ec7e5165be01b5df2666f224e0114938301fb789dd6a444bf3cc4ab2d64

    SHA512

    2915b76daf574985943bb97cd0e26160fea8717d0dc6319270b23193dcc31947dd8048648e1fbd5a139f6b1cde893c9532b76189408a663540afe8f6bb427042

  • /data/user/0/net.playtouch.ballwall.xsl/.jiagu/classes.dex
    Filesize

    6.0MB

    MD5

    9f88e36fb11c389a67adc59c0a109532

    SHA1

    7cd88d6af1398c40f6ccd0a0e406775dd39f4fa9

    SHA256

    315a8692ef6b7fc989a617487d58b820a6217d6d1294cfbd123f9ee9a2e7306c

    SHA512

    c7a9f75cc3f694a6068ea44fdc1b5b40f6919067ef7f50889971e531ad5f7f33262f4234d324fa49445818111252bb3e6a2060778fd4612ce34e77ee69712795

  • /data/user/0/net.playtouch.ballwall.xsl/.jiagu/classes.dex!classes2.dex
    Filesize

    4.1MB

    MD5

    aae041a0578ca88874d897346dac0f6b

    SHA1

    30a4622c3b45b31a9c63af143e5813e892dfb68b

    SHA256

    24c7fdf0d4cd551f931a03513b8ad578d492dc415ce346f034cf37a2076c71b0

    SHA512

    cb6e4b3bab864c84b31222eb2ad6c89b6b7d4cdb679c1b67f574e3a0105131f302d46c1bd48b4344d896283740f09d42b7fdf628fa4769213ba8f9890cfbb2e4

  • /data/user/0/net.playtouch.ballwall.xsl/.jiagu/libjiagu.so
    Filesize

    487KB

    MD5

    610a895c4a71bbeeaea16eddb1422bbf

    SHA1

    9f919de42ed1e80bfadfef48f8202b202166f869

    SHA256

    baa349e9b5a47be21b6ea00ef2e0c0c5dc203c0e4c391dac46df07ca9d333217

    SHA512

    ef4173ba32309ef1257b75bcff28fd44ab14398577b4fb3b6b95323035c964201ed39546cda3b7115ba5025781f3b9c018443e7932edd50a25b1be60359f80f2

  • /data/user/0/net.playtouch.ballwall.xsl/.jiagu/libjiagu_64.so
    Filesize

    525KB

    MD5

    198e8f0e9b0d80997fde430f9973c1a1

    SHA1

    dec0b84b06072ad07d44b445d7e23587c0bc7f02

    SHA256

    dc9d0faf8652513f0a1eed698b9559e0bbfaefe12c203d239f551ff557abbe5a

    SHA512

    2868fc26e0bbc32e6f7c7d6e56ed6e9517d0ea4a7d8021a5f50af5945d6ac27fe87f500e32eed5143f37d484ba95fef481c9d5c11b652bac2a26d267358252ea

  • /data/user/0/net.playtouch.ballwall.xsl/app_analytics/analytics.apk
    Filesize

    1.1MB

    MD5

    36e6ce6a5a4e2b31982e3f8208a1af0e

    SHA1

    a7418ca9cdc61749e4c39e55cd4e74a0871ec196

    SHA256

    ca10a9f91f5246c09ab701368126bf842e33e62c0559328b34fc91295c13d298

    SHA512

    ee5022a46bc98db4be250a219a805073d5e558e5f3377de5d5becc5c3584f20988667af5e209dd2525c40c9fa70c8c7fac18eaaee98957b79d96b20a901ff100

  • /data/user/0/net.playtouch.ballwall.xsl/app_analytics/analytics.apk.tmp
    Filesize

    545KB

    MD5

    4f6ba7835b8b8aff7f7c7a97bc262b34

    SHA1

    2f9b2433c46ed5ecd9c1d8dcf708d07340eb146c

    SHA256

    5a0062937d99f0b85e6fcfdb162ce6224ed0635cbb8cf6e3ac253d57fd8ef97c

    SHA512

    14a0ab2048b3366bf3893eeb3c8f978deadb1d28bff5c1918976db49dfc62307eaf7fcfe843d0f3696d175df7710defe120273cefb6221ce2612b14839536f40

  • /data/user/0/net.playtouch.ballwall.xsl/app_mimo/mimo_asset.apk
    Filesize

    397KB

    MD5

    015b93140e10348bac8bbe9c1cd26e55

    SHA1

    96f545739c8ae213c5afbc97e1bca4ef0346a100

    SHA256

    1891f588d5d58f90ce8ee77afc968279aef9011470ac5a172ae3066093e4a0ba

    SHA512

    351b4fdac4cd30a81c5ae593583c7412aa931632e3fcc20062fb13c8d06c3e286bc8e8468d6d2fb753b0cf12d21e3614db38ddbc502cf0c8de1b1abfd4f6a055

  • /data/user/0/net.playtouch.ballwall.xsl/app_mimo/mimo_download.apk
    Filesize

    695KB

    MD5

    c526c06b92f76ffbf2bd3232f1053284

    SHA1

    0e9d0fbef236f8807f20d9a14c50ddfcc1736b52

    SHA256

    fae59c9be4e17b082d213c4ff1c7873cc7175b28f7c6664f8e8aa8280489017a

    SHA512

    8a4da38bce8ae67d3e8de8ce44d63b0ae96f9f12321bc8f84b623a0fbc5ba4f7bb87b18141dd8a64227debef3be72f58b0b76636c5d71a217891f78f3397831f

  • /data/user/0/net.playtouch.ballwall.xsl/app_mimo/mimo_download.apk.tmp
    Filesize

    400KB

    MD5

    3e86b24cfe8ea3644e3a6bb2f3bc75a1

    SHA1

    7881136fb412166d04ad5b6c4fdb9550a66fd99f

    SHA256

    1b01837a2b9004309bff95248adc60d39ffdadc90e52ebf645b2c5ce76f28bc7

    SHA512

    40ec714867b4a3e0aaa920abb648f331ce43e8bef442e782eff5ebaacb1052785e681c23b85f6ec50bc4e57e5b9924e61ca4fd72589f810ce8c670b5094b612b

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db
    Filesize

    32KB

    MD5

    1d202d4be405873b626289a5f4882c93

    SHA1

    f448bf3a167dafb7d2560cf01048349935d76f8c

    SHA256

    85932381cd6ca244529cf872dbdbf377fc7019911c06651eb40dc36a59ac85bc

    SHA512

    f21e8baaa63aa271715d505560e5d65c285be90d2c45e55704f1a6c1c90c74459476faf5b77d6593ce8642394a65c71b9ff3d9195511a02c4a2850eea7920c66

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journal
    Filesize

    512B

    MD5

    9c2636c9df7c0e4413bdfd1575e7e156

    SHA1

    165db2440a44c7170d42fc418c4cf1797d48d5b1

    SHA256

    ab6027f2bb9f18f05ee714aa07add647e2ded1b79602ade78e2d2ea03728c93b

    SHA512

    828e6157e94d246ff772e71242450ae11440983a5973d98147870ad680da8ef5b689d1c18ee8fb348c426dde93bdc895e2fd4a151c7a1048235771058572dced

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journal
    Filesize

    8KB

    MD5

    efd1925d34a51bcfb015f10eff87a569

    SHA1

    e8d8018b5bd0ee96f48e3cd457303fb218f859de

    SHA256

    b99c3afd55ac96bf80df470bb80b90d4192e8692466e84d8dc14dcb9d64d497b

    SHA512

    9f8a8955d5ba55f58f90756c57b7e9fb67e2da6cd0af0142d929fc2f2868d5d9c8c89414bb77737c3752fcb4c6a5cf40dc7d64959d9bc3a8fe35cfa65fb92e2b

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journal
    Filesize

    8KB

    MD5

    868fd12aa2e0557bbbaad761d3897c08

    SHA1

    116be08208e33112f90773ea4eb79be35660ad74

    SHA256

    51c833c9d56529bcec25ddef076ab9e312bc86abcd0404bc5a646fbed01ec252

    SHA512

    a471a56c562ca408305fa971b0379fb062d5c9300a8100099224645f874dd5e8c3dd9f34f68942a1d5a3f2a8f2603cd1d6296574777ba9e875fe54408f5932a3

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journal
    Filesize

    8KB

    MD5

    b4489612a18502f0bf7c9c85f8151e37

    SHA1

    34439743e057d0a030cee0c8547d753d2ddeef12

    SHA256

    d0d94df546029b53c53305198c4ef64755fd32e4d551aa2d6f75517f8e8ef790

    SHA512

    66e7e97dceef42da59cb8680b9cb977454f809233f3f13c216545fe0516b3e751727325e863cbb9fd3b13b342051db67b1aa4e2cb850c9636ab914bc55e4a583

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journal
    Filesize

    8KB

    MD5

    9ef896ffe0b28464233c95bd28eb2bb7

    SHA1

    ed7769be7a51783fafb94868deae4237f43c0e1a

    SHA256

    738b76cfded058d1f2974608c0a4dea4e0a6492731a5fbc66b532f6836998bf4

    SHA512

    2d8c4f525371304121c274dea90b380b84a9735149e653417a1b474450ad31ea96fa7fc8850fcd0bfa781796c09274fdfcdc5fd33a3e4c1c541f5c98acc7caa9

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journal
    Filesize

    12KB

    MD5

    7bc84ff55182ec7a59a53e7206289bb4

    SHA1

    a6eff934765057915bee87af2a6021b2e5fa858f

    SHA256

    e98fdd8c4869995d52a8c1b1942240488447d03356bcf464b9b88d2ef68fd783

    SHA512

    49b29098f839a75a939f6d7d8cb55bd2eee51a18c212df94dd7d1f9f25a2c66592780e94f627582fd5056f7134d053607dc8bedb47d4c782e03f9c5d6def2057

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analyticsv2.db
    Filesize

    16KB

    MD5

    332f4666ac6ab883431f54aa6a8fdb88

    SHA1

    a8864dc7f9c5a40cc466a1a70d87be90ebed93db

    SHA256

    5b0a421ab65ee299ede67c57aad92cbdd97c125ff8a66618550907451fdde28b

    SHA512

    c33d754886772550c87e78687664fd98a2b474d35b555605ee05337042f96f00824d150922872cb46a0e583da68b46f18511e994af2b6193de7148933954d9fb

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journal
    Filesize

    512B

    MD5

    4599367c8907d578142070e7e2689c21

    SHA1

    6af41019b0cba9a8a0083b69543760ff515bbc35

    SHA256

    3db88b00535dbe7921c561d889467a8631b31cdff797458eaf1dd58b6480f208

    SHA512

    32dda4e89a9ab03fe6088a6139ff17e20b0b87d32f9e7bfd3233d4f58959a41170c6cf6a9590bc927953d86c1c98419f1f3e2712b0b3478c0b1dc558c137b833

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journal
    Filesize

    8KB

    MD5

    f0fe15ee99ca0500799372af7183131e

    SHA1

    2eb018d164492bfa7c21a0122eb609f4ffb58125

    SHA256

    a32d8d8ec4d29cfd08b9a091e0a7b8a385c5de330b29577de6ec7d8c3b2a816d

    SHA512

    b635588077d8acecc8d1f617d4691f9763435b2bea2cbb35ca6876b6bb50267edd18f1a8363cd15cab21bd189372930e98d95d91542b555d71f4d5b0995bd600

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journal
    Filesize

    8KB

    MD5

    e66c5b638191aedaa8a6109f3e6e62b6

    SHA1

    507377b614a8e71e19ec8244d32d69ca9de96edb

    SHA256

    63be34ccce3b5dcc2514ca576c61de40869b324d972adb6666c7882f664d7adb

    SHA512

    1ad1d0028c7add1595549794f8aae60901bb7b2dc0c18672d28262db237cbb93325d06f68fee6c5ac7efbe8da94291989a4f3c4aa7c4ed8922527c4c48a502fc

  • /data/user/0/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journal
    Filesize

    8KB

    MD5

    49327ba9da9e6a3fe8de361eb6afb16d

    SHA1

    a3a50c7162817be2b1108df7a8a9df795fd00419

    SHA256

    ecf5d66d530ff68de14779050b3888f3f9b90a3e70e31d92dec3b76ca11fbad8

    SHA512

    c09010f719e7cfe3ba88fffc79b75de777d98fb395bd43cbc78a75aa0d67b5be6c400d6d0b8c24667d8b38e0d1397b3186761d45358fd6c38ef8cb5b8510286b

  • /data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db
    Filesize

    20KB

    MD5

    f7260514f1cca81a0d4c2f60631b1c07

    SHA1

    ff58b2bb94f79b69f801cfa1caea8f2f6f73a0d6

    SHA256

    ed973e43bef924fec62cd5852f835f6d7f4e760f695a81e3792092f36ed0194e

    SHA512

    707bd1a1aa5776818ac282409d05a5c70e79277c6f7458253c60d94b6981108261d7e17b3232f4c06efd37e351774d2967c811b2b41805ad87612536c796e0c8

  • /data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal
    Filesize

    512B

    MD5

    61cc40bf8dfbf92f3c9f054d44e977c7

    SHA1

    3bb22e850aa8b21feaed04462835f8afe91787f2

    SHA256

    eccd763bfd7a4fdb1677d4518fdfdda9ca89a0e505fea8960aa4c95d43cc54b9

    SHA512

    03cfc0550c5d4a56cee2d4889f5701407fd288cd2eb5542e1663ff36fb14133f3452cc96138058d90177a0b8dedf26aa3ae994b3c3a2cc05c54b7d8ae57a6168

  • /data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal
    Filesize

    8KB

    MD5

    f27f2a827003ac1e456f003a5f374652

    SHA1

    89fcf7f9627ce114c530e83f7d3393ba73fd9651

    SHA256

    02a8e41472d33932c30f810d02999b2f82508afeefc527f41322539cd9b88a62

    SHA512

    bb4e078896a8bfebca4c99515149f32b381d18245c5b0f7f26f461261268a5d24541d7a86e2ea9b49c49e6124d33fa1101161697e11dad69984e511bba191b30

  • /data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal
    Filesize

    8KB

    MD5

    e525495b3ac129193779058d971182a7

    SHA1

    487eecdf231b7d8b81da9171204d421645e3b53d

    SHA256

    ecd37ed7744c56bc9d5b5be313ec880a85ee0c1753ebc34af98588b6c54feb64

    SHA512

    86858a79736c8f51a6803605fc7affdfa25fe6c6d596e279ddae8586f36c8ff0069dce9d274a680be35d943902691bb375a52ec354bf712f83cac71a739c5955

  • /data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal
    Filesize

    12KB

    MD5

    806b4cd34da7122d29cca0f5caea1bc3

    SHA1

    bdd8ef8357773dae1e0281aa0ac6a7dca43e3090

    SHA256

    38a5ad68efb4c8cc0ac11077f035ecb7a8f9a19f76d15ff3b4bb2e0c9fbc5baa

    SHA512

    f3421101e036cf01246ce8c20794f3b7e96316ae766388d8d788313bf65baff7dc1338c30bac55b57805d478b4f4467a1f43c96e39cefaa34bd94e705a1284c7

  • /data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal
    Filesize

    12KB

    MD5

    03d1bdfc6df09d8edca698d3d43c38da

    SHA1

    1de8b7611c30d06742ba4b5bd68e5cfd4562f9f9

    SHA256

    2915f5387d3ad8c392719c8f3d615eb319e367b25c1cad709762ed59857e38cd

    SHA512

    05f9b1c1f9fbf19675d17add2887c6bf84120677efc22a3d489a9ee6eab5464a283f96fa2d6200d8d334c2a10f72d62b497e6bac43f3021d98f74b0b0293168b

  • /data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journal
    Filesize

    12KB

    MD5

    2f50145cee1885903de1e21134fb18dc

    SHA1

    e89cd567942640e3b658c040968b561e6a089a75

    SHA256

    8ed0a91c99e5ce3441a87ad0d78966cdd9460bce0a8ae99d0005295ea78126b1

    SHA512

    f37bcc0f366cc592fe753d3347c429a835da507ebb97bd3dfda8c4a92856b57a326f5aca214aca5f23309f2eeec5d827a7ac8585ab62ea598886634768ed91f1

  • /data/user/0/net.playtouch.ballwall.xsl/databases/requests.db
    Filesize

    16KB

    MD5

    102fb2adeb52b4db7c082608864c5a97

    SHA1

    5f9e3d27721e2c9b1baf031cf3ce222cbb5c3965

    SHA256

    c301bd234cff21ab968a1f857d1707ac6635ebc5a68e567c612fb224a890305d

    SHA512

    3c875d10ea5874c9e15298948c27a104ad7846cc8b29347ba7033eca0259f72ccb1be5b79b4c6c49d2bc0b9b322a5194e235a6dcaacbf751d92700826c40b466

  • /data/user/0/net.playtouch.ballwall.xsl/databases/requests.db-journal
    Filesize

    512B

    MD5

    301bfb2dc6db60a057871eb4bee046ef

    SHA1

    f1aab2ba5391527ff8dc82bab89621a92b2eaac2

    SHA256

    43de9a9c8f255d291b94165c456e1eec1153f20c659de9374150fa2bd762a0da

    SHA512

    36d04ba3d4baf5c7661f03af378aab37acf93c3d473c6e767e1c6c61d67a93e51ceeb991b54c40a227647eebfbf9871ecf647d3fc69ccaad9c87dd22b538692d

  • /data/user/0/net.playtouch.ballwall.xsl/databases/requests.db-journal
    Filesize

    8KB

    MD5

    68fb50196f04ee2996f37e3e4c3c4ebc

    SHA1

    ba5d3fbfcb104087dedf2fa3c6cffff0cec367b4

    SHA256

    003f321d2781eeb806e1272885626035797c236c566a3d627a44634c8946b3a0

    SHA512

    7213d011b40df3aeb54d72c27e87d41621a10fd748d172b55538d2f712fd151065a30aa69f515b14a3386e4d2bf566e58a2efe3064ce9a3930df35daa548f482

  • /data/user/0/net.playtouch.ballwall.xsl/databases/requests.db-journal
    Filesize

    8KB

    MD5

    bce0d2742ff7784af15e28b35bc5749a

    SHA1

    8683facddb8f2276024812e15f577813ad0e95f3

    SHA256

    99c2c7272a7e8d5f42437f97811c2e28c3f5cf1c01fefa25fd51ffd0de0cc9c6

    SHA512

    43a22623c47fd3a6bad0e02cb7b2dde8eb92ff9c51b029e60e5aa2b31bc12753a87a418cc6006986942a386007eb5e0c034594f56ea551d10955a1a4254b5d02

  • /data/user/0/net.playtouch.ballwall.xsl/files/.envelope/a==7.5.3&&2_1716303797678_envelope.log
    Filesize

    1KB

    MD5

    abcd22d0deeadeee633d55c40bdb5b3c

    SHA1

    8adf948652726427c22897a8d1aea71b5a3a7066

    SHA256

    d5884f9fd1608c86f70a0cc60547e0906c9398c31b7d47a8b83602d669aa74f7

    SHA512

    ed3ac0419745137c26d2e33ef871d27ae1ba02261f614d7c1bfe29d952589cfe8874027ee4e2a930ce5ef4ec39d00169fe0e01323e7dcbe720f0376a3c4dba5e

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.ac
    Filesize

    40B

    MD5

    612cdccd3f37caebd6080e923243975e

    SHA1

    2be65605d009dbcac245635497e2e5b884442250

    SHA256

    843bfe97864ca5958e6ee703adf7a2b6f1c8c4dbe1ea97c788b7a8e59b2404a4

    SHA512

    769d58f949b131e142874f6fb2beb8eb70be8ec0f7de30f8b571914cfdf229fe8c49307387381efa6f108d605c70a7e7e09632305b71d57fc3e1fcab7f4e6761

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.ic
    Filesize

    32B

    MD5

    61c0ef0ebb425fa3037a6c57fa44107e

    SHA1

    a6b152e8ebf389c6d412fd0524332c60065342a7

    SHA256

    93a17b69ff6b983887962af592251401ce3ef8652e2d1d3213730fb01df91734

    SHA512

    9b04e8109fba5e93b65ffd4e19c7da9c5c9cca561fcdba413cfcb2f17d7005add5b302d0ed294e76adf448c87b679803aeeab747ff14a04ebfd74c36bef8e4df

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.pk
    Filesize

    32B

    MD5

    46fdca5332753dbcb18952ecbc75762b

    SHA1

    e3de3dc3998f1789dcb6726ab2cdc846033f1dec

    SHA256

    9ede73268241c57163718112261e064bb0aebef90203e8513bd6897c6c330f2d

    SHA512

    1db7abfc68962e467ba8914c34096dbeba0351f17338ef5fe32cf6a01343a1e64bb9735e39a19809f83b6a0ecf23870f21d11b31556168a2dbf39ce704dcd52f

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.pk.h
    Filesize

    64B

    MD5

    40447a627f32ca9eb3fb97c467d972c7

    SHA1

    f1f50c8ea8876b87dae7561dbb8879663aae5701

    SHA256

    7bd9767ee41d51a64f85c0b1926558213bb5db9f8189fd899d8bebbd614ecea6

    SHA512

    c51c5135aa1dbf5644c662f17962b4b3b3a454d09f015ac4cd59d21544111f885fa738bc8d683baef31cdb2423da3001f219817b9123faf5ff6df2083b8e6c97

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.rd
    Filesize

    32B

    MD5

    edd609b21695ae1f5d844e1b7e492af0

    SHA1

    9998f1bb0b7edc82e529afc78798aeaaf275c9cf

    SHA256

    7dad80939d7949de4a438ede9d7118e975f97e88657a3c8cb079d4adc652c9c4

    SHA512

    98a403fe63427a7e327831249726cdd84e8ab74d577336759fa50ecc765fb1abbe597d30db440950bdf506796e90b6443c3222a14be29dc372ea81eaca26a544

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.ri
    Filesize

    307B

    MD5

    ac3a9da32fe33417cebf34356b3440bd

    SHA1

    92011aa86c89eef5e6439f4aa900406b64742a43

    SHA256

    eea286a938e2eee5eb2afd70bf831e04c5870f3160721f46522294078091b115

    SHA512

    0b4fbbff8e026e5c33027b3d6f2d247235b0504158a6be2805156f0298a5c0ab9d9e6ea628a587ff93a593f4485aca8326be4ec25935018567fe4396d085d549

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.ri
    Filesize

    314B

    MD5

    cff020537b63692feec23f18a0f6de2d

    SHA1

    4634b8239dafc7aec9c6861093d220051d517a86

    SHA256

    aa5a876927b7e5aa4f757b910121c1e79568c63ba230c7ba7962584efa2a4f22

    SHA512

    50f166e8d5f58313dea243352d855b49b24eaef4259954b80cee5dce197d56eae4999a84a690694240b1796b9d35b875b08d48542a49257dcfe3e5149ed70592

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_cf
    Filesize

    32B

    MD5

    bcfdf07e96a3eea4466e54677ab3e889

    SHA1

    78f70c653aabd31bdc0e98bf416d725510d7446a

    SHA256

    11f6809bf3d8e0e8a5b6aa8832cca4c77b620e7435a297ea5e580fab843dffc0

    SHA512

    b77e9b6d1044292f8d1c7620cd5e740f03fdd6c717de1bab4b94aa9e8898072e95b7b501ea43daf254447262fc44fd88467f6e47c39682dc97bc19ce99b16b41

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_cf
    Filesize

    54B

    MD5

    6b3a36abc2b3c780e75a4c0faf34049b

    SHA1

    4a75ca1a7e0d9ca30cae7ce7392e8b2ebf6115c8

    SHA256

    25e55419e99ab313e3355c7aed025d8ad3d7ee149b461d7fc6e758c1d8d36966

    SHA512

    d4d46a6905941fc84117bb7cc6bb99c53a19f11088bb4efcd6a6db68f3b264a5d90314afba76bfa1d20b1668f32a576206e95193ebaf6db83a9b3c8ca3ca849a

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_pid
    Filesize

    32B

    MD5

    e5d6f7972c53ab0e5492bc3272f10d55

    SHA1

    c28b3afebf0a0eaa2ef42a9ffb0e49b190da9507

    SHA256

    2fa9b6ec04aed2f09d6bfe3bf1c600e68753efc6aa3428d40222a2eff998118a

    SHA512

    60c2c1de1c8b67a31f95e6a17917b3df58a38e204b646e8af900fa5d7ec07e4fc7907411d3824fd34d8a962c52eee75d643db9ef12f8824d2b1384a6f93704d8

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_pid
    Filesize

    54B

    MD5

    a3016c183e83281f1aacb5a802915251

    SHA1

    bfe80a0dfd5fdfdbbda0fce3cf841fb3e06c3978

    SHA256

    9330e5cebeaf9615a49f1d745506e95ed59bf051bc1453bc20d73868ed075bcf

    SHA512

    9e3e3d3961c1095d5b2313421076b33dd74ef67a56f90457e63540b833fb64ce21af1f0dae5ba2fcb69a6113098c154d85d3055638a6e44b497209f4eac2e019

  • /data/user/0/net.playtouch.ballwall.xsl/files/.jiagu.lock
    Filesize

    27B

    MD5

    23bcecaf0aafb27cc0d2bf1f34abe3a1

    SHA1

    eb0222fb8b610d2ceb9f8eb6e0f4a43b1b25d7df

    SHA256

    b5e4e22ee045c285fba62099e8f59afee9376d405c32ff72c2cae7f41bf96d87

    SHA512

    b8fb4fd7b97d72ea9f55e44a2dbdb71ff4aba440ab8366cd95d45c6392dace34c827d9f8b03cf6b0f62ed6c530b1b3fe3ef748739838f5967f3e299ae71fb01a

  • /data/user/0/net.playtouch.ballwall.xsl/files/.umeng/exchangeIdentity.json
    Filesize

    162B

    MD5

    17e6fb6da6262969cfb0ec21532dfa9b

    SHA1

    ad07176f792be5cb996cae90c880fed09a2ba0ea

    SHA256

    3479fce89c139910b25b0605f768e7c43672d5edb4b72bcba6e7107e322fbccf

    SHA512

    ed2cff667c2d09a528b068fcf99d0649411ed2749041ec803ec8b151c0d6318afcee199a2179bfd8ecf76ca06cb0965f733ca1a601c2587cdbd567e0fb9a10a1

  • /data/user/0/net.playtouch.ballwall.xsl/files/54db829f09424caad69f7fb9350fa48d/policy.cache
    Filesize

    12KB

    MD5

    f0326dac3bd2b30f8d216ca46622eb2e

    SHA1

    e34cdf9529a96288d206b07c5078afb012be5b7e

    SHA256

    c59de2f2197323aae35f444e18f7f5d7ae2967cc486b0297bceaf329ef8dfcb7

    SHA512

    b91250a4e5cc4c2464657d7d625a3d19144b321fbc091041bae340dd8f7a27712dbc0c5961d50bc039471014c568fb06df9b8305f20e4ad08c65894e56b4c49b

  • /data/user/0/net.playtouch.ballwall.xsl/files/5a0d76b426bd66bf94b94e19a8719e41/policy.cache
    Filesize

    1KB

    MD5

    4d4dc628d8a3facc8c167ffbbb0cab59

    SHA1

    6f28c74730b309c7536866b5aaf04fa69d95b105

    SHA256

    742d07ce2cfa3958c889ad99e422f8eb063b824071fdd072e56a6de5c8d325b5

    SHA512

    59843b5081a0f9dd353159ff0dbf07572cb44ecf0393798558f2f1fa054129902e8dc2da88db38565ddb34fc6857ecd338fc4f24f6c50992be638793e5554bad

  • /data/user/0/net.playtouch.ballwall.xsl/files/AppEventsLogger.persistedevents
    Filesize

    402B

    MD5

    125dd77d7f63aff936afac2cd5769ec1

    SHA1

    b4e5e0d6396be8d6cc29532db8074001b218cb32

    SHA256

    ae790c947b53259c7eeddb6d0efd29b625414e00932366dfe9c016da53554db2

    SHA512

    86dbd3bd1982c7b56cfb7bf7d0aad41e446cdd858aed1216fdd6d5b76b962a94ad8d0ea4ce103548dcbd226339fcffc9cc23b72599de4ea49fe4e0fa8c5bd616

  • /data/user/0/net.playtouch.ballwall.xsl/files/a194a0a7214f6cbda0672045c51505d1/policy.cache
    Filesize

    13KB

    MD5

    04ecedd182ec514d1a60d8d2ac199148

    SHA1

    3cc41071881e11ef4a5e8500ba83eb91e0502aed

    SHA256

    690fff1587a5f29c71dd12bb95f7c8d0d25518679ef90c9a9adf8c69ff5f18bf

    SHA512

    27a2e1ea979a0c3568064028558da583b72cdb5133442cbd5434c497ba0d2ba7a0a0445dee5657c4ec277af119b820371e03ac4c799eee93731b12379c491837

  • /data/user/0/net.playtouch.ballwall.xsl/files/exid.dat
    Filesize

    85B

    MD5

    e27a2369aa7127845ef08f2ea7e6b6d8

    SHA1

    aae5816e400f86fda1869f24f6e0dce5e7fd4a23

    SHA256

    4a2d6045113c91b77e9d1b031efe51536a0427ad21afa1dd6e4a602d8dc4503e

    SHA512

    1fccb913b63ae84e6e87ab34d767ecd2bffc3ed9474a4ae2842156df2a9a65d3557b538a60456e09e66170b603bf1175602e1b792e32d558737466cb228c31a7

  • /data/user/0/net.playtouch.ballwall.xsl/files/mimo_res/journal.tmp
    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/user/0/net.playtouch.ballwall.xsl/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MzAzNzk3MDM1
    Filesize

    1KB

    MD5

    9f3330c4ae95c2921132be4dc811a815

    SHA1

    7115c7468ccfa8af8f043fd629785f8da4582963

    SHA256

    f05c12c28134d79434c7df3a0b21f1a9ce4daf5a4dfa5017487822c1d531cae5

    SHA512

    f3ea8253e368aea4b0aa0709374531b39cfeb2de3356e490c8c32d0091e7366f3f5f3a8e7912c839ad1375caa6ddb06a1c38d0a8ab8fdcedf9140b3fa2fec9f0

  • /data/user/0/net.playtouch.ballwall.xsl/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MzAzODI3NjY1
    Filesize

    1KB

    MD5

    2046f92b6dc738cda0df00b3ac9c2c44

    SHA1

    c9cfed8912383b5ad8042b9e4f93afbf57b43a24

    SHA256

    e2fc24637072fdbdd36ccf92e718f67bfcde66710f71ae39682d4b93642b5ce0

    SHA512

    2e64ddcd7de64b555432cf7e6eb7d7823d947b7a32390d1434c7efaf0a7d9251b0cb490795b2f771d9479faee5b574bf03bc73ead5ca078d770261743e8bb7b8

  • /data/user/0/net.playtouch.ballwall.xsl/files/umeng_it.cache
    Filesize

    350B

    MD5

    cca402aa9544fee71022b459b21542e4

    SHA1

    ab839375bde76ecd6448f8534e73787ac5399cfe

    SHA256

    d79811d1f0443774b4eefac69d02a1113c62d2326892ab57a31f040891c35bbb

    SHA512

    362eeb554dad7845723ed39690634e7f03af3682e7ee33ab464273d7b8e28b68afde79f2465c0d8e74f88a0831a52a69158e394715495fa0eb8338c381971afe

  • /storage/emulated/0/save_data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.ri
    Filesize

    307B

    MD5

    24785980a1107ee573badb27d5134fb8

    SHA1

    55fe396c9f559ecf7f4601600455e7f732090c22

    SHA256

    96f1f73fa13be03aa94be13c15ca22ccbe14bb509c0c48d8a4cabbdaa4fde9f6

    SHA512

    51a09b988f86e04b9557688535081a434bbe6dace46debf014307788bf83115444c14287141bd56bdce3a6551471247c25a5374d269e3d7b72b99b8c8cd9184a

  • /storage/emulated/0/save_data/net.playtouch.ballwall.xsl/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml
    Filesize

    949B

    MD5

    b48cf3b0b6a5c46310ff792b221da908

    SHA1

    a9bf174d7e1540e4a8428533436be65f50337757

    SHA256

    5d0207d69a0b62848adaa8f643b537810844ff06c34f50223f1dde6cf0fc179a

    SHA512

    549bef016f4ab3aaa94918be52d9932faad9e8db36e2a621239b7764e4ce43124814626306c8410b7e9a5ce451a7c121775e1337a8b8ea39dab8fac25117a2d5

  • /storage/emulated/0/save_data/net.playtouch.ballwall.xsl/shared_prefs/com.facebook.sdk.appEventPreferences.xml
    Filesize

    160B

    MD5

    49b27cc3a14987e7a7bc825c2bf0ff48

    SHA1

    59b5e5c7ae1c2857d2d12c833a0827af0f4026f9

    SHA256

    20a98e8e598d625f4305bb0912dbb77fc32faf6133647464c50755681f669f8e

    SHA512

    10f079c074889a65f55e7063d3ed0a6c95978c169e383a980403f107f49f84eaea6283fd2fc5a09cbd5e4921760da46e728ac6c1bd1896d7ce9be46e1d9dfc37

  • /storage/emulated/0/save_data/net.playtouch.ballwall.xsl/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    458B

    MD5

    6307aedc4298d9c4e2a9e805f668b272

    SHA1

    7dab2183020ed489d2c242ce96c3f38ceda2d7b3

    SHA256

    554071ebba2e767280aa3abdc448f08679b2851a8fd9466b90682ed6c4d5da38

    SHA512

    93fa1e4a62a42b9af7c6f2af97cf86340d839118564080443ecff6c1a0faebf39a0135df77a8bb6538ed60c9860b738703c492268f01682a6f36f15f31e0a305

  • /system_ext/priv-app/Settings/Settings.apk
    Filesize

    7.7MB

    MD5

    1842f309c6c9f42efd0b344fac2742e0

    SHA1

    5a2350f376aad6588662c6b57d3f4b11594d934b

    SHA256

    d3bbd4ab80df927b202dd77daceaa6d7c8670f3b67ec4358b4dd2db4bf61b5f0

    SHA512

    2e50456efbbd6ac883ec03f12212dad63ce34f8e4c0c3839525c0af92a3b48e8170fd1cb992928df324b0461782e1140e0e9ee33fc11a9c2d3f2a50ba30a0c93