Analysis
-
max time kernel
177s -
max time network
183s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
21-05-2024 15:01
Static task
static1
Behavioral task
behavioral1
Sample
63b63ee21d966bc71663fbea3aa118c2_JaffaCakes118.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
63b63ee21d966bc71663fbea3aa118c2_JaffaCakes118.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
63b63ee21d966bc71663fbea3aa118c2_JaffaCakes118.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral4
Sample
mimo_asset.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral5
Sample
mimo_asset.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral6
Sample
mimo_asset.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
63b63ee21d966bc71663fbea3aa118c2_JaffaCakes118.apk
-
Size
11.8MB
-
MD5
63b63ee21d966bc71663fbea3aa118c2
-
SHA1
e98ebfd5ca33f46e43666d57ccfdf35c51f88618
-
SHA256
8cdcf3004d53aabc3e7ba23b2d4cab986328bff234471886953702656ca6a80b
-
SHA512
0c7e73c52bc2f65dd3d818fddfca5f6125601912d69c2d6c478fc3c2d5f348016d3bbab00d33f574e524d7db88b36a3ab3908a06f6f9b31058c0ef346b0f2bfe
-
SSDEEP
196608:oHFHWH8c8wfpznpzuM+IjkpHVL8A74W39zgbf0KJ9wqnP4FgoT7/EwsM46kfAy:CB86wfpznpzPNkpHV5cWtzuzGqnjoMMa
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
Processes:
net.playtouch.ballwall.xslioc process /system/app/Superuser.apk net.playtouch.ballwall.xsl -
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Loads dropped Dex/Jar 1 TTPs 7 IoCs
Runs executable file dropped to the device during analysis.
Processes:
net.playtouch.ballwall.xslioc pid process /data/user/0/net.playtouch.ballwall.xsl/.jiagu/classes.dex 4584 net.playtouch.ballwall.xsl /data/user/0/net.playtouch.ballwall.xsl/.jiagu/classes.dex!classes2.dex 4584 net.playtouch.ballwall.xsl /data/user/0/net.playtouch.ballwall.xsl/app_mimo/mimo_download.apk 4584 net.playtouch.ballwall.xsl /data/user/0/net.playtouch.ballwall.xsl/app_analytics/analytics.apk 4584 net.playtouch.ballwall.xsl /data/user/0/net.playtouch.ballwall.xsl/app_analytics/analytics.apk 4584 net.playtouch.ballwall.xsl /system_ext/priv-app/Settings/Settings.apk 4584 net.playtouch.ballwall.xsl /system_ext/priv-app/Settings/Settings.apk 4584 net.playtouch.ballwall.xsl -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses net.playtouch.ballwall.xsl -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.net.wifi.IWifiManager.getConnectionInfo net.playtouch.ballwall.xsl -
Acquires the wake lock 1 IoCs
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock net.playtouch.ballwall.xsl -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo net.playtouch.ballwall.xsl -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
Processes:
flow ioc 27 raw.githubusercontent.com 28 raw.githubusercontent.com 29 raw.githubusercontent.com 30 raw.githubusercontent.com -
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes:
flow ioc 25 ip-api.com -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Requests dangerous framework permissions 1 IoCs
Processes:
description ioc Allows an app to access approximate location. android.permission.ACCESS_COARSE_LOCATION -
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework API call android.hardware.SensorManager.registerListener net.playtouch.ballwall.xsl -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
net.playtouch.ballwall.xsldescription ioc process Framework API call javax.crypto.Cipher.doFinal net.playtouch.ballwall.xsl
Processes
-
net.playtouch.ballwall.xsl1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Acquires the wake lock
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/net.playtouch.ballwall.xsl/databases/ua.dbFilesize
36KB
MD54a8120c91e3143b2db43971dbc77cf8d
SHA137c5700d35059c4e0a718ced73b3d73ba5d2b277
SHA2561fa1b6e6bd75bcef64d35785e2fd6f2e73dcdf92dce73c8b2a8fed49746d53bb
SHA512465cd282927e30a0a894a75ad261feddde5a31869c8cea6b548362afce08fbb7cff7a784bd1d62c3e4c95916ce30e758d3919dd4cdc13176f29d68c2620c185c
-
/data/data/net.playtouch.ballwall.xsl/databases/ua.dbFilesize
24KB
MD5ae31fb4199b0ee8d482b38c3d22a41e0
SHA1b7bb08ba92bd035d0419535b35af1efcd8e0587c
SHA256692effb8d298dd5ec0ba88bcbd5e078e335973dc189ca8913fb6d2853ce4114b
SHA512d6609105be07f3f902f709dee6379517362c745523e5f805596a3faf9e89b358b98d70adb1a3c26c12fdeee0588e9435111ea92db937277143130da5db0d6ef2
-
/data/data/net.playtouch.ballwall.xsl/databases/ua.db-journalFilesize
512B
MD5a87d3d63b0737a16b13c8250413d6068
SHA1665f15e20216027d97f886ba437a29ae91d227c7
SHA256304c857a2cf031638c03753635b0afcfecc8ca60a97bf5a69631f43db4d51ffc
SHA5121375fa614255456353b2390b64129c2deeb0b2e69d61d5b4dd447564cbf6ab46d85892a59d347aacec0e4c6cdd8ede740aa8c0c2b545a00957fb99f84e8bdbeb
-
/data/data/net.playtouch.ballwall.xsl/databases/ua.db-journalFilesize
8KB
MD5d4db118acaf55d4ce68ddabc6aa3d011
SHA12204c77652695e79a15625a219e87cc3221986bf
SHA2569daa4357f77b20c536d8c1e8095dba4d9cf5ea332db112aa680dafb47d4e2b33
SHA5124ca25d5eda88b936cc49f2c371fcdd022e554d2d80c5ff8506d11827753a48c1dcb05d7e3240849f28c1c81d6750d9ba2edd293af46a0f7a44313a9bf8b89592
-
/data/data/net.playtouch.ballwall.xsl/databases/ua.db-journalFilesize
8KB
MD50096e47bc49174807d483d982b76339c
SHA17bfcbd402346245d6f7ae3e3595e13d52a0ac74b
SHA25675a41c39145ee0a0ace4af3faea942b2fcfafefd03e84c5f5b53db287839d3e1
SHA51286caf7bb2b2126a2b28fffa41b0d59fa16326460a720960ccafa4f3132f769832623369ca5d0f297bbcd3a2ef1f045bfd9f9c71c815fdcc2c30af82e2635aa3e
-
/data/data/net.playtouch.ballwall.xsl/databases/ua.db-journalFilesize
16KB
MD500a5411a382c551b6d8213e4ab92075c
SHA1e99538d87e46c2b9ca66b138b15292ddfe4a63d7
SHA25671379ec7e5165be01b5df2666f224e0114938301fb789dd6a444bf3cc4ab2d64
SHA5122915b76daf574985943bb97cd0e26160fea8717d0dc6319270b23193dcc31947dd8048648e1fbd5a139f6b1cde893c9532b76189408a663540afe8f6bb427042
-
/data/user/0/net.playtouch.ballwall.xsl/.jiagu/classes.dexFilesize
6.0MB
MD59f88e36fb11c389a67adc59c0a109532
SHA17cd88d6af1398c40f6ccd0a0e406775dd39f4fa9
SHA256315a8692ef6b7fc989a617487d58b820a6217d6d1294cfbd123f9ee9a2e7306c
SHA512c7a9f75cc3f694a6068ea44fdc1b5b40f6919067ef7f50889971e531ad5f7f33262f4234d324fa49445818111252bb3e6a2060778fd4612ce34e77ee69712795
-
/data/user/0/net.playtouch.ballwall.xsl/.jiagu/classes.dex!classes2.dexFilesize
4.1MB
MD5aae041a0578ca88874d897346dac0f6b
SHA130a4622c3b45b31a9c63af143e5813e892dfb68b
SHA25624c7fdf0d4cd551f931a03513b8ad578d492dc415ce346f034cf37a2076c71b0
SHA512cb6e4b3bab864c84b31222eb2ad6c89b6b7d4cdb679c1b67f574e3a0105131f302d46c1bd48b4344d896283740f09d42b7fdf628fa4769213ba8f9890cfbb2e4
-
/data/user/0/net.playtouch.ballwall.xsl/.jiagu/libjiagu.soFilesize
487KB
MD5610a895c4a71bbeeaea16eddb1422bbf
SHA19f919de42ed1e80bfadfef48f8202b202166f869
SHA256baa349e9b5a47be21b6ea00ef2e0c0c5dc203c0e4c391dac46df07ca9d333217
SHA512ef4173ba32309ef1257b75bcff28fd44ab14398577b4fb3b6b95323035c964201ed39546cda3b7115ba5025781f3b9c018443e7932edd50a25b1be60359f80f2
-
/data/user/0/net.playtouch.ballwall.xsl/.jiagu/libjiagu_64.soFilesize
525KB
MD5198e8f0e9b0d80997fde430f9973c1a1
SHA1dec0b84b06072ad07d44b445d7e23587c0bc7f02
SHA256dc9d0faf8652513f0a1eed698b9559e0bbfaefe12c203d239f551ff557abbe5a
SHA5122868fc26e0bbc32e6f7c7d6e56ed6e9517d0ea4a7d8021a5f50af5945d6ac27fe87f500e32eed5143f37d484ba95fef481c9d5c11b652bac2a26d267358252ea
-
/data/user/0/net.playtouch.ballwall.xsl/app_analytics/analytics.apkFilesize
1.1MB
MD536e6ce6a5a4e2b31982e3f8208a1af0e
SHA1a7418ca9cdc61749e4c39e55cd4e74a0871ec196
SHA256ca10a9f91f5246c09ab701368126bf842e33e62c0559328b34fc91295c13d298
SHA512ee5022a46bc98db4be250a219a805073d5e558e5f3377de5d5becc5c3584f20988667af5e209dd2525c40c9fa70c8c7fac18eaaee98957b79d96b20a901ff100
-
/data/user/0/net.playtouch.ballwall.xsl/app_analytics/analytics.apk.tmpFilesize
545KB
MD54f6ba7835b8b8aff7f7c7a97bc262b34
SHA12f9b2433c46ed5ecd9c1d8dcf708d07340eb146c
SHA2565a0062937d99f0b85e6fcfdb162ce6224ed0635cbb8cf6e3ac253d57fd8ef97c
SHA51214a0ab2048b3366bf3893eeb3c8f978deadb1d28bff5c1918976db49dfc62307eaf7fcfe843d0f3696d175df7710defe120273cefb6221ce2612b14839536f40
-
/data/user/0/net.playtouch.ballwall.xsl/app_mimo/mimo_asset.apkFilesize
397KB
MD5015b93140e10348bac8bbe9c1cd26e55
SHA196f545739c8ae213c5afbc97e1bca4ef0346a100
SHA2561891f588d5d58f90ce8ee77afc968279aef9011470ac5a172ae3066093e4a0ba
SHA512351b4fdac4cd30a81c5ae593583c7412aa931632e3fcc20062fb13c8d06c3e286bc8e8468d6d2fb753b0cf12d21e3614db38ddbc502cf0c8de1b1abfd4f6a055
-
/data/user/0/net.playtouch.ballwall.xsl/app_mimo/mimo_download.apkFilesize
695KB
MD5c526c06b92f76ffbf2bd3232f1053284
SHA10e9d0fbef236f8807f20d9a14c50ddfcc1736b52
SHA256fae59c9be4e17b082d213c4ff1c7873cc7175b28f7c6664f8e8aa8280489017a
SHA5128a4da38bce8ae67d3e8de8ce44d63b0ae96f9f12321bc8f84b623a0fbc5ba4f7bb87b18141dd8a64227debef3be72f58b0b76636c5d71a217891f78f3397831f
-
/data/user/0/net.playtouch.ballwall.xsl/app_mimo/mimo_download.apk.tmpFilesize
400KB
MD53e86b24cfe8ea3644e3a6bb2f3bc75a1
SHA17881136fb412166d04ad5b6c4fdb9550a66fd99f
SHA2561b01837a2b9004309bff95248adc60d39ffdadc90e52ebf645b2c5ce76f28bc7
SHA51240ec714867b4a3e0aaa920abb648f331ce43e8bef442e782eff5ebaacb1052785e681c23b85f6ec50bc4e57e5b9924e61ca4fd72589f810ce8c670b5094b612b
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analytics.dbFilesize
32KB
MD51d202d4be405873b626289a5f4882c93
SHA1f448bf3a167dafb7d2560cf01048349935d76f8c
SHA25685932381cd6ca244529cf872dbdbf377fc7019911c06651eb40dc36a59ac85bc
SHA512f21e8baaa63aa271715d505560e5d65c285be90d2c45e55704f1a6c1c90c74459476faf5b77d6593ce8642394a65c71b9ff3d9195511a02c4a2850eea7920c66
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journalFilesize
512B
MD59c2636c9df7c0e4413bdfd1575e7e156
SHA1165db2440a44c7170d42fc418c4cf1797d48d5b1
SHA256ab6027f2bb9f18f05ee714aa07add647e2ded1b79602ade78e2d2ea03728c93b
SHA512828e6157e94d246ff772e71242450ae11440983a5973d98147870ad680da8ef5b689d1c18ee8fb348c426dde93bdc895e2fd4a151c7a1048235771058572dced
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journalFilesize
8KB
MD5efd1925d34a51bcfb015f10eff87a569
SHA1e8d8018b5bd0ee96f48e3cd457303fb218f859de
SHA256b99c3afd55ac96bf80df470bb80b90d4192e8692466e84d8dc14dcb9d64d497b
SHA5129f8a8955d5ba55f58f90756c57b7e9fb67e2da6cd0af0142d929fc2f2868d5d9c8c89414bb77737c3752fcb4c6a5cf40dc7d64959d9bc3a8fe35cfa65fb92e2b
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journalFilesize
8KB
MD5868fd12aa2e0557bbbaad761d3897c08
SHA1116be08208e33112f90773ea4eb79be35660ad74
SHA25651c833c9d56529bcec25ddef076ab9e312bc86abcd0404bc5a646fbed01ec252
SHA512a471a56c562ca408305fa971b0379fb062d5c9300a8100099224645f874dd5e8c3dd9f34f68942a1d5a3f2a8f2603cd1d6296574777ba9e875fe54408f5932a3
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journalFilesize
8KB
MD5b4489612a18502f0bf7c9c85f8151e37
SHA134439743e057d0a030cee0c8547d753d2ddeef12
SHA256d0d94df546029b53c53305198c4ef64755fd32e4d551aa2d6f75517f8e8ef790
SHA51266e7e97dceef42da59cb8680b9cb977454f809233f3f13c216545fe0516b3e751727325e863cbb9fd3b13b342051db67b1aa4e2cb850c9636ab914bc55e4a583
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journalFilesize
8KB
MD59ef896ffe0b28464233c95bd28eb2bb7
SHA1ed7769be7a51783fafb94868deae4237f43c0e1a
SHA256738b76cfded058d1f2974608c0a4dea4e0a6492731a5fbc66b532f6836998bf4
SHA5122d8c4f525371304121c274dea90b380b84a9735149e653417a1b474450ad31ea96fa7fc8850fcd0bfa781796c09274fdfcdc5fd33a3e4c1c541f5c98acc7caa9
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analytics.db-journalFilesize
12KB
MD57bc84ff55182ec7a59a53e7206289bb4
SHA1a6eff934765057915bee87af2a6021b2e5fa858f
SHA256e98fdd8c4869995d52a8c1b1942240488447d03356bcf464b9b88d2ef68fd783
SHA51249b29098f839a75a939f6d7d8cb55bd2eee51a18c212df94dd7d1f9f25a2c66592780e94f627582fd5056f7134d053607dc8bedb47d4c782e03f9c5d6def2057
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analyticsv2.dbFilesize
16KB
MD5332f4666ac6ab883431f54aa6a8fdb88
SHA1a8864dc7f9c5a40cc466a1a70d87be90ebed93db
SHA2565b0a421ab65ee299ede67c57aad92cbdd97c125ff8a66618550907451fdde28b
SHA512c33d754886772550c87e78687664fd98a2b474d35b555605ee05337042f96f00824d150922872cb46a0e583da68b46f18511e994af2b6193de7148933954d9fb
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journalFilesize
512B
MD54599367c8907d578142070e7e2689c21
SHA16af41019b0cba9a8a0083b69543760ff515bbc35
SHA2563db88b00535dbe7921c561d889467a8631b31cdff797458eaf1dd58b6480f208
SHA51232dda4e89a9ab03fe6088a6139ff17e20b0b87d32f9e7bfd3233d4f58959a41170c6cf6a9590bc927953d86c1c98419f1f3e2712b0b3478c0b1dc558c137b833
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journalFilesize
8KB
MD5f0fe15ee99ca0500799372af7183131e
SHA12eb018d164492bfa7c21a0122eb609f4ffb58125
SHA256a32d8d8ec4d29cfd08b9a091e0a7b8a385c5de330b29577de6ec7d8c3b2a816d
SHA512b635588077d8acecc8d1f617d4691f9763435b2bea2cbb35ca6876b6bb50267edd18f1a8363cd15cab21bd189372930e98d95d91542b555d71f4d5b0995bd600
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journalFilesize
8KB
MD5e66c5b638191aedaa8a6109f3e6e62b6
SHA1507377b614a8e71e19ec8244d32d69ca9de96edb
SHA25663be34ccce3b5dcc2514ca576c61de40869b324d972adb6666c7882f664d7adb
SHA5121ad1d0028c7add1595549794f8aae60901bb7b2dc0c18672d28262db237cbb93325d06f68fee6c5ac7efbe8da94291989a4f3c4aa7c4ed8922527c4c48a502fc
-
/data/user/0/net.playtouch.ballwall.xsl/databases/analyticsv2.db-journalFilesize
8KB
MD549327ba9da9e6a3fe8de361eb6afb16d
SHA1a3a50c7162817be2b1108df7a8a9df795fd00419
SHA256ecf5d66d530ff68de14779050b3888f3f9b90a3e70e31d92dec3b76ca11fbad8
SHA512c09010f719e7cfe3ba88fffc79b75de777d98fb395bd43cbc78a75aa0d67b5be6c400d6d0b8c24667d8b38e0d1397b3186761d45358fd6c38ef8cb5b8510286b
-
/data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.dbFilesize
20KB
MD5f7260514f1cca81a0d4c2f60631b1c07
SHA1ff58b2bb94f79b69f801cfa1caea8f2f6f73a0d6
SHA256ed973e43bef924fec62cd5852f835f6d7f4e760f695a81e3792092f36ed0194e
SHA512707bd1a1aa5776818ac282409d05a5c70e79277c6f7458253c60d94b6981108261d7e17b3232f4c06efd37e351774d2967c811b2b41805ad87612536c796e0c8
-
/data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journalFilesize
512B
MD561cc40bf8dfbf92f3c9f054d44e977c7
SHA13bb22e850aa8b21feaed04462835f8afe91787f2
SHA256eccd763bfd7a4fdb1677d4518fdfdda9ca89a0e505fea8960aa4c95d43cc54b9
SHA51203cfc0550c5d4a56cee2d4889f5701407fd288cd2eb5542e1663ff36fb14133f3452cc96138058d90177a0b8dedf26aa3ae994b3c3a2cc05c54b7d8ae57a6168
-
/data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journalFilesize
8KB
MD5f27f2a827003ac1e456f003a5f374652
SHA189fcf7f9627ce114c530e83f7d3393ba73fd9651
SHA25602a8e41472d33932c30f810d02999b2f82508afeefc527f41322539cd9b88a62
SHA512bb4e078896a8bfebca4c99515149f32b381d18245c5b0f7f26f461261268a5d24541d7a86e2ea9b49c49e6124d33fa1101161697e11dad69984e511bba191b30
-
/data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journalFilesize
8KB
MD5e525495b3ac129193779058d971182a7
SHA1487eecdf231b7d8b81da9171204d421645e3b53d
SHA256ecd37ed7744c56bc9d5b5be313ec880a85ee0c1753ebc34af98588b6c54feb64
SHA51286858a79736c8f51a6803605fc7affdfa25fe6c6d596e279ddae8586f36c8ff0069dce9d274a680be35d943902691bb375a52ec354bf712f83cac71a739c5955
-
/data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journalFilesize
12KB
MD5806b4cd34da7122d29cca0f5caea1bc3
SHA1bdd8ef8357773dae1e0281aa0ac6a7dca43e3090
SHA25638a5ad68efb4c8cc0ac11077f035ecb7a8f9a19f76d15ff3b4bb2e0c9fbc5baa
SHA512f3421101e036cf01246ce8c20794f3b7e96316ae766388d8d788313bf65baff7dc1338c30bac55b57805d478b4f4467a1f43c96e39cefaa34bd94e705a1284c7
-
/data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journalFilesize
12KB
MD503d1bdfc6df09d8edca698d3d43c38da
SHA11de8b7611c30d06742ba4b5bd68e5cfd4562f9f9
SHA2562915f5387d3ad8c392719c8f3d615eb319e367b25c1cad709762ed59857e38cd
SHA51205f9b1c1f9fbf19675d17add2887c6bf84120677efc22a3d489a9ee6eab5464a283f96fa2d6200d8d334c2a10f72d62b497e6bac43f3021d98f74b0b0293168b
-
/data/user/0/net.playtouch.ballwall.xsl/databases/reportServiceDB.db-journalFilesize
12KB
MD52f50145cee1885903de1e21134fb18dc
SHA1e89cd567942640e3b658c040968b561e6a089a75
SHA2568ed0a91c99e5ce3441a87ad0d78966cdd9460bce0a8ae99d0005295ea78126b1
SHA512f37bcc0f366cc592fe753d3347c429a835da507ebb97bd3dfda8c4a92856b57a326f5aca214aca5f23309f2eeec5d827a7ac8585ab62ea598886634768ed91f1
-
/data/user/0/net.playtouch.ballwall.xsl/databases/requests.dbFilesize
16KB
MD5102fb2adeb52b4db7c082608864c5a97
SHA15f9e3d27721e2c9b1baf031cf3ce222cbb5c3965
SHA256c301bd234cff21ab968a1f857d1707ac6635ebc5a68e567c612fb224a890305d
SHA5123c875d10ea5874c9e15298948c27a104ad7846cc8b29347ba7033eca0259f72ccb1be5b79b4c6c49d2bc0b9b322a5194e235a6dcaacbf751d92700826c40b466
-
/data/user/0/net.playtouch.ballwall.xsl/databases/requests.db-journalFilesize
512B
MD5301bfb2dc6db60a057871eb4bee046ef
SHA1f1aab2ba5391527ff8dc82bab89621a92b2eaac2
SHA25643de9a9c8f255d291b94165c456e1eec1153f20c659de9374150fa2bd762a0da
SHA51236d04ba3d4baf5c7661f03af378aab37acf93c3d473c6e767e1c6c61d67a93e51ceeb991b54c40a227647eebfbf9871ecf647d3fc69ccaad9c87dd22b538692d
-
/data/user/0/net.playtouch.ballwall.xsl/databases/requests.db-journalFilesize
8KB
MD568fb50196f04ee2996f37e3e4c3c4ebc
SHA1ba5d3fbfcb104087dedf2fa3c6cffff0cec367b4
SHA256003f321d2781eeb806e1272885626035797c236c566a3d627a44634c8946b3a0
SHA5127213d011b40df3aeb54d72c27e87d41621a10fd748d172b55538d2f712fd151065a30aa69f515b14a3386e4d2bf566e58a2efe3064ce9a3930df35daa548f482
-
/data/user/0/net.playtouch.ballwall.xsl/databases/requests.db-journalFilesize
8KB
MD5bce0d2742ff7784af15e28b35bc5749a
SHA18683facddb8f2276024812e15f577813ad0e95f3
SHA25699c2c7272a7e8d5f42437f97811c2e28c3f5cf1c01fefa25fd51ffd0de0cc9c6
SHA51243a22623c47fd3a6bad0e02cb7b2dde8eb92ff9c51b029e60e5aa2b31bc12753a87a418cc6006986942a386007eb5e0c034594f56ea551d10955a1a4254b5d02
-
/data/user/0/net.playtouch.ballwall.xsl/files/.envelope/a==7.5.3&&2_1716303797678_envelope.logFilesize
1KB
MD5abcd22d0deeadeee633d55c40bdb5b3c
SHA18adf948652726427c22897a8d1aea71b5a3a7066
SHA256d5884f9fd1608c86f70a0cc60547e0906c9398c31b7d47a8b83602d669aa74f7
SHA512ed3ac0419745137c26d2e33ef871d27ae1ba02261f614d7c1bfe29d952589cfe8874027ee4e2a930ce5ef4ec39d00169fe0e01323e7dcbe720f0376a3c4dba5e
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.acFilesize
40B
MD5612cdccd3f37caebd6080e923243975e
SHA12be65605d009dbcac245635497e2e5b884442250
SHA256843bfe97864ca5958e6ee703adf7a2b6f1c8c4dbe1ea97c788b7a8e59b2404a4
SHA512769d58f949b131e142874f6fb2beb8eb70be8ec0f7de30f8b571914cfdf229fe8c49307387381efa6f108d605c70a7e7e09632305b71d57fc3e1fcab7f4e6761
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.icFilesize
32B
MD561c0ef0ebb425fa3037a6c57fa44107e
SHA1a6b152e8ebf389c6d412fd0524332c60065342a7
SHA25693a17b69ff6b983887962af592251401ce3ef8652e2d1d3213730fb01df91734
SHA5129b04e8109fba5e93b65ffd4e19c7da9c5c9cca561fcdba413cfcb2f17d7005add5b302d0ed294e76adf448c87b679803aeeab747ff14a04ebfd74c36bef8e4df
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.pkFilesize
32B
MD546fdca5332753dbcb18952ecbc75762b
SHA1e3de3dc3998f1789dcb6726ab2cdc846033f1dec
SHA2569ede73268241c57163718112261e064bb0aebef90203e8513bd6897c6c330f2d
SHA5121db7abfc68962e467ba8914c34096dbeba0351f17338ef5fe32cf6a01343a1e64bb9735e39a19809f83b6a0ecf23870f21d11b31556168a2dbf39ce704dcd52f
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.pk.hFilesize
64B
MD540447a627f32ca9eb3fb97c467d972c7
SHA1f1f50c8ea8876b87dae7561dbb8879663aae5701
SHA2567bd9767ee41d51a64f85c0b1926558213bb5db9f8189fd899d8bebbd614ecea6
SHA512c51c5135aa1dbf5644c662f17962b4b3b3a454d09f015ac4cd59d21544111f885fa738bc8d683baef31cdb2423da3001f219817b9123faf5ff6df2083b8e6c97
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.rdFilesize
32B
MD5edd609b21695ae1f5d844e1b7e492af0
SHA19998f1bb0b7edc82e529afc78798aeaaf275c9cf
SHA2567dad80939d7949de4a438ede9d7118e975f97e88657a3c8cb079d4adc652c9c4
SHA51298a403fe63427a7e327831249726cdd84e8ab74d577336759fa50ecc765fb1abbe597d30db440950bdf506796e90b6443c3222a14be29dc372ea81eaca26a544
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.riFilesize
307B
MD5ac3a9da32fe33417cebf34356b3440bd
SHA192011aa86c89eef5e6439f4aa900406b64742a43
SHA256eea286a938e2eee5eb2afd70bf831e04c5870f3160721f46522294078091b115
SHA5120b4fbbff8e026e5c33027b3d6f2d247235b0504158a6be2805156f0298a5c0ab9d9e6ea628a587ff93a593f4485aca8326be4ec25935018567fe4396d085d549
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.riFilesize
314B
MD5cff020537b63692feec23f18a0f6de2d
SHA14634b8239dafc7aec9c6861093d220051d517a86
SHA256aa5a876927b7e5aa4f757b910121c1e79568c63ba230c7ba7962584efa2a4f22
SHA51250f166e8d5f58313dea243352d855b49b24eaef4259954b80cee5dce197d56eae4999a84a690694240b1796b9d35b875b08d48542a49257dcfe3e5149ed70592
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_cfFilesize
32B
MD5bcfdf07e96a3eea4466e54677ab3e889
SHA178f70c653aabd31bdc0e98bf416d725510d7446a
SHA25611f6809bf3d8e0e8a5b6aa8832cca4c77b620e7435a297ea5e580fab843dffc0
SHA512b77e9b6d1044292f8d1c7620cd5e740f03fdd6c717de1bab4b94aa9e8898072e95b7b501ea43daf254447262fc44fd88467f6e47c39682dc97bc19ce99b16b41
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_cfFilesize
54B
MD56b3a36abc2b3c780e75a4c0faf34049b
SHA14a75ca1a7e0d9ca30cae7ce7392e8b2ebf6115c8
SHA25625e55419e99ab313e3355c7aed025d8ad3d7ee149b461d7fc6e758c1d8d36966
SHA512d4d46a6905941fc84117bb7cc6bb99c53a19f11088bb4efcd6a6db68f3b264a5d90314afba76bfa1d20b1668f32a576206e95193ebaf6db83a9b3c8ca3ca849a
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_pidFilesize
32B
MD5e5d6f7972c53ab0e5492bc3272f10d55
SHA1c28b3afebf0a0eaa2ef42a9ffb0e49b190da9507
SHA2562fa9b6ec04aed2f09d6bfe3bf1c600e68753efc6aa3428d40222a2eff998118a
SHA51260c2c1de1c8b67a31f95e6a17917b3df58a38e204b646e8af900fa5d7ec07e4fc7907411d3824fd34d8a962c52eee75d643db9ef12f8824d2b1384a6f93704d8
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jglogs/.jg.store.report_pidFilesize
54B
MD5a3016c183e83281f1aacb5a802915251
SHA1bfe80a0dfd5fdfdbbda0fce3cf841fb3e06c3978
SHA2569330e5cebeaf9615a49f1d745506e95ed59bf051bc1453bc20d73868ed075bcf
SHA5129e3e3d3961c1095d5b2313421076b33dd74ef67a56f90457e63540b833fb64ce21af1f0dae5ba2fcb69a6113098c154d85d3055638a6e44b497209f4eac2e019
-
/data/user/0/net.playtouch.ballwall.xsl/files/.jiagu.lockFilesize
27B
MD523bcecaf0aafb27cc0d2bf1f34abe3a1
SHA1eb0222fb8b610d2ceb9f8eb6e0f4a43b1b25d7df
SHA256b5e4e22ee045c285fba62099e8f59afee9376d405c32ff72c2cae7f41bf96d87
SHA512b8fb4fd7b97d72ea9f55e44a2dbdb71ff4aba440ab8366cd95d45c6392dace34c827d9f8b03cf6b0f62ed6c530b1b3fe3ef748739838f5967f3e299ae71fb01a
-
/data/user/0/net.playtouch.ballwall.xsl/files/.umeng/exchangeIdentity.jsonFilesize
162B
MD517e6fb6da6262969cfb0ec21532dfa9b
SHA1ad07176f792be5cb996cae90c880fed09a2ba0ea
SHA2563479fce89c139910b25b0605f768e7c43672d5edb4b72bcba6e7107e322fbccf
SHA512ed2cff667c2d09a528b068fcf99d0649411ed2749041ec803ec8b151c0d6318afcee199a2179bfd8ecf76ca06cb0965f733ca1a601c2587cdbd567e0fb9a10a1
-
/data/user/0/net.playtouch.ballwall.xsl/files/54db829f09424caad69f7fb9350fa48d/policy.cacheFilesize
12KB
MD5f0326dac3bd2b30f8d216ca46622eb2e
SHA1e34cdf9529a96288d206b07c5078afb012be5b7e
SHA256c59de2f2197323aae35f444e18f7f5d7ae2967cc486b0297bceaf329ef8dfcb7
SHA512b91250a4e5cc4c2464657d7d625a3d19144b321fbc091041bae340dd8f7a27712dbc0c5961d50bc039471014c568fb06df9b8305f20e4ad08c65894e56b4c49b
-
/data/user/0/net.playtouch.ballwall.xsl/files/5a0d76b426bd66bf94b94e19a8719e41/policy.cacheFilesize
1KB
MD54d4dc628d8a3facc8c167ffbbb0cab59
SHA16f28c74730b309c7536866b5aaf04fa69d95b105
SHA256742d07ce2cfa3958c889ad99e422f8eb063b824071fdd072e56a6de5c8d325b5
SHA51259843b5081a0f9dd353159ff0dbf07572cb44ecf0393798558f2f1fa054129902e8dc2da88db38565ddb34fc6857ecd338fc4f24f6c50992be638793e5554bad
-
/data/user/0/net.playtouch.ballwall.xsl/files/AppEventsLogger.persistedeventsFilesize
402B
MD5125dd77d7f63aff936afac2cd5769ec1
SHA1b4e5e0d6396be8d6cc29532db8074001b218cb32
SHA256ae790c947b53259c7eeddb6d0efd29b625414e00932366dfe9c016da53554db2
SHA51286dbd3bd1982c7b56cfb7bf7d0aad41e446cdd858aed1216fdd6d5b76b962a94ad8d0ea4ce103548dcbd226339fcffc9cc23b72599de4ea49fe4e0fa8c5bd616
-
/data/user/0/net.playtouch.ballwall.xsl/files/a194a0a7214f6cbda0672045c51505d1/policy.cacheFilesize
13KB
MD504ecedd182ec514d1a60d8d2ac199148
SHA13cc41071881e11ef4a5e8500ba83eb91e0502aed
SHA256690fff1587a5f29c71dd12bb95f7c8d0d25518679ef90c9a9adf8c69ff5f18bf
SHA51227a2e1ea979a0c3568064028558da583b72cdb5133442cbd5434c497ba0d2ba7a0a0445dee5657c4ec277af119b820371e03ac4c799eee93731b12379c491837
-
/data/user/0/net.playtouch.ballwall.xsl/files/exid.datFilesize
85B
MD5e27a2369aa7127845ef08f2ea7e6b6d8
SHA1aae5816e400f86fda1869f24f6e0dce5e7fd4a23
SHA2564a2d6045113c91b77e9d1b031efe51536a0427ad21afa1dd6e4a602d8dc4503e
SHA5121fccb913b63ae84e6e87ab34d767ecd2bffc3ed9474a4ae2842156df2a9a65d3557b538a60456e09e66170b603bf1175602e1b792e32d558737466cb228c31a7
-
/data/user/0/net.playtouch.ballwall.xsl/files/mimo_res/journal.tmpFilesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
/data/user/0/net.playtouch.ballwall.xsl/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MzAzNzk3MDM1Filesize
1KB
MD59f3330c4ae95c2921132be4dc811a815
SHA17115c7468ccfa8af8f043fd629785f8da4582963
SHA256f05c12c28134d79434c7df3a0b21f1a9ce4daf5a4dfa5017487822c1d531cae5
SHA512f3ea8253e368aea4b0aa0709374531b39cfeb2de3356e490c8c32d0091e7366f3f5f3a8e7912c839ad1375caa6ddb06a1c38d0a8ab8fdcedf9140b3fa2fec9f0
-
/data/user/0/net.playtouch.ballwall.xsl/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzE2MzAzODI3NjY1Filesize
1KB
MD52046f92b6dc738cda0df00b3ac9c2c44
SHA1c9cfed8912383b5ad8042b9e4f93afbf57b43a24
SHA256e2fc24637072fdbdd36ccf92e718f67bfcde66710f71ae39682d4b93642b5ce0
SHA5122e64ddcd7de64b555432cf7e6eb7d7823d947b7a32390d1434c7efaf0a7d9251b0cb490795b2f771d9479faee5b574bf03bc73ead5ca078d770261743e8bb7b8
-
/data/user/0/net.playtouch.ballwall.xsl/files/umeng_it.cacheFilesize
350B
MD5cca402aa9544fee71022b459b21542e4
SHA1ab839375bde76ecd6448f8534e73787ac5399cfe
SHA256d79811d1f0443774b4eefac69d02a1113c62d2326892ab57a31f040891c35bbb
SHA512362eeb554dad7845723ed39690634e7f03af3682e7ee33ab464273d7b8e28b68afde79f2465c0d8e74f88a0831a52a69158e394715495fa0eb8338c381971afe
-
/storage/emulated/0/save_data/net.playtouch.ballwall.xsl/files/.jglogs/.jg.riFilesize
307B
MD524785980a1107ee573badb27d5134fb8
SHA155fe396c9f559ecf7f4601600455e7f732090c22
SHA25696f1f73fa13be03aa94be13c15ca22ccbe14bb509c0c48d8a4cabbdaa4fde9f6
SHA51251a09b988f86e04b9557688535081a434bbe6dace46debf014307788bf83115444c14287141bd56bdce3a6551471247c25a5374d269e3d7b72b99b8c8cd9184a
-
/storage/emulated/0/save_data/net.playtouch.ballwall.xsl/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xmlFilesize
949B
MD5b48cf3b0b6a5c46310ff792b221da908
SHA1a9bf174d7e1540e4a8428533436be65f50337757
SHA2565d0207d69a0b62848adaa8f643b537810844ff06c34f50223f1dde6cf0fc179a
SHA512549bef016f4ab3aaa94918be52d9932faad9e8db36e2a621239b7764e4ce43124814626306c8410b7e9a5ce451a7c121775e1337a8b8ea39dab8fac25117a2d5
-
/storage/emulated/0/save_data/net.playtouch.ballwall.xsl/shared_prefs/com.facebook.sdk.appEventPreferences.xmlFilesize
160B
MD549b27cc3a14987e7a7bc825c2bf0ff48
SHA159b5e5c7ae1c2857d2d12c833a0827af0f4026f9
SHA25620a98e8e598d625f4305bb0912dbb77fc32faf6133647464c50755681f669f8e
SHA51210f079c074889a65f55e7063d3ed0a6c95978c169e383a980403f107f49f84eaea6283fd2fc5a09cbd5e4921760da46e728ac6c1bd1896d7ce9be46e1d9dfc37
-
/storage/emulated/0/save_data/net.playtouch.ballwall.xsl/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
458B
MD56307aedc4298d9c4e2a9e805f668b272
SHA17dab2183020ed489d2c242ce96c3f38ceda2d7b3
SHA256554071ebba2e767280aa3abdc448f08679b2851a8fd9466b90682ed6c4d5da38
SHA51293fa1e4a62a42b9af7c6f2af97cf86340d839118564080443ecff6c1a0faebf39a0135df77a8bb6538ed60c9860b738703c492268f01682a6f36f15f31e0a305
-
/system_ext/priv-app/Settings/Settings.apkFilesize
7.7MB
MD51842f309c6c9f42efd0b344fac2742e0
SHA15a2350f376aad6588662c6b57d3f4b11594d934b
SHA256d3bbd4ab80df927b202dd77daceaa6d7c8670f3b67ec4358b4dd2db4bf61b5f0
SHA5122e50456efbbd6ac883ec03f12212dad63ce34f8e4c0c3839525c0af92a3b48e8170fd1cb992928df324b0461782e1140e0e9ee33fc11a9c2d3f2a50ba30a0c93