Malware Analysis Report

2024-10-19 13:18

Sample ID 240602-p826aach81
Target 8e2971a8a4404ac5c274368ddb6c4fb5_JaffaCakes118
SHA256 d65b894979ab0b3f45ccf9026040e7f2aa65e06f9bd093c16068b1e934d00669
Tags
discovery evasion persistence collection credential_access impact
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Mobile Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

d65b894979ab0b3f45ccf9026040e7f2aa65e06f9bd093c16068b1e934d00669

Threat Level: Likely malicious

The file 8e2971a8a4404ac5c274368ddb6c4fb5_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion persistence collection credential_access impact

Checks if the Android device is rooted.

Loads dropped Dex/Jar

Registers a broadcast receiver at runtime (usually for listening for system events)

Obtains sensitive information copied to the device clipboard

Checks CPU information

Checks memory information

Queries information about running processes on the device

Queries the mobile country code (MCC)

Requests dangerous framework permissions

Checks if the internet connection is available

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-06-02 13:00

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Required to be able to access the camera device. android.permission.CAMERA N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-02 13:00

Reported

2024-06-02 13:04

Platform

android-x86-arm-20240514-en

Max time kernel

68s

Max time network

148s

Command Line

com.mochibits.hexario.google

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.mochibits.hexario.google/cache/1582435991586.jar N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

com.mochibits.hexario.google

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.212.227:443 tcp
US 1.1.1.1:53 stats.unity3d.com udp
US 1.1.1.1:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 1.1.1.1:53 s3.mochibits.com udp
FR 18.161.111.73:80 s3.mochibits.com tcp
US 1.1.1.1:53 rt.applovin.com udp
US 34.117.147.68:80 rt.applovin.com tcp
US 1.1.1.1:53 graph.facebook.com udp
GB 163.70.147.22:443 graph.facebook.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 216.58.212.226:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 a.applovin.com udp
US 34.117.147.68:80 a.applovin.com tcp
US 1.1.1.1:53 everyplay.com udp
US 1.1.1.1:53 impact.applifier.com udp
US 216.239.32.21:443 everyplay.com tcp
US 216.239.32.21:443 everyplay.com tcp
US 1.1.1.1:53 api.everyplay.com udp
US 216.239.38.21:443 api.everyplay.com tcp
US 1.1.1.1:53 api.uca.cloud.unity3d.com udp
US 34.107.172.168:443 api.uca.cloud.unity3d.com tcp
US 130.211.33.175:443 impact.applifier.com tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
GB 216.58.212.226:443 googleads.g.doubleclick.net tcp
GB 216.58.212.226:443 googleads.g.doubleclick.net tcp
US 216.239.38.21:443 api.everyplay.com tcp
US 1.1.1.1:53 d.applovin.com udp
US 34.110.179.88:80 d.applovin.com tcp
US 1.1.1.1:53 img.applovin.com udp
US 34.160.119.165:80 img.applovin.com tcp
US 1.1.1.1:53 assets.applovin.com udp
US 34.120.175.182:80 assets.applovin.com tcp
US 1.1.1.1:53 res1.applovin.com udp
US 34.149.87.163:80 res1.applovin.com tcp
US 34.117.147.68:80 a.applovin.com tcp
US 216.239.38.21:443 api.everyplay.com tcp
US 216.239.32.21:443 api.everyplay.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
US 216.239.38.21:443 api.everyplay.com tcp
US 216.239.38.21:443 api.everyplay.com tcp
US 216.239.32.21:443 api.everyplay.com tcp
US 216.239.38.21:443 api.everyplay.com tcp
US 216.239.32.21:443 api.everyplay.com tcp
US 216.239.32.21:443 api.everyplay.com tcp
US 216.239.32.21:443 api.everyplay.com tcp
US 216.239.32.21:443 api.everyplay.com tcp
US 216.239.32.21:443 api.everyplay.com tcp
US 216.239.32.21:443 api.everyplay.com tcp
GB 142.250.200.46:443 tcp
GB 142.250.180.2:443 tcp

Files

/data/data/com.mochibits.hexario.google/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/config

MD5 be9c7776487d2e7acafe19ee6b8f21d6
SHA1 90810f66873caf39148ba339ce3beaa77e1298c1
SHA256 cb1fbaacc4744f268bfd751d7d4b3d8591acea8175dd4cffce28b96a3eb2886c
SHA512 b2eb531d818c211f83b35d98e479cd4ca4720e269b9a13a9e1684bd15e10dbba6ce524d8da1b4bbacd124f0a6daec0a6716b464b3cfd29be958b778f32d45d11

/data/user/0/com.mochibits.hexario.google/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/ArchivedEvents/171733328900000.9ced3b1b/e

MD5 303bb60819fd4ce889a635e8cf71e95c
SHA1 c2bcc53c4a6d36f97aa40f06e17192631904e2ca
SHA256 6fe935bcde9ee408129a15fbcd65af809ab8af3167c0796c8f047b6c9953f631
SHA512 3b257ab3279de9705d00dfd0868a3cbc3e99a20fc627b3ddc2c76c05cf84cdfc471495e9c19428c811b335be5517155e36dfb11fe64e55235d8200875288e55a

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/ArchivedEvents/171733328900000.9ced3b1b/s

MD5 96b6c44aa15077970c87a06edfd57947
SHA1 a5190364a3b2ecf16f44f5fed10c8ec428b24205
SHA256 04718c6833e32f4eae9a50cdadf03160152c5ed8b4d6de2c9cc292f66d9953b2
SHA512 aa44c8dffd331c698418c1e3a52c8a7cadc890755625088bb5eaac81ad8254b60c2db81973c239f80bc47d958809ff5e487f0690f708e7dba245b526f40a70db

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/ArchivedEvents/171733328900001.9ced3b1b/e

MD5 6a61cefa17e1690980069a908b822309
SHA1 2b04dc480b72e1f45a9fe4e3f46498da03c2082a
SHA256 6046ed92eaf056ad04f56ccccecd987e79cdea955b16242c5f621089540e63f8
SHA512 73ebc3529538070c136e96f8f1fdd588ccb26d2196b88ae4d4c122d2b98fafe85fc3cb2548098714ac5f875a031da0f7b00a4b800de5280143a95f7cc9d88c8b

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/values

MD5 37b942de1b7ab8e6d9e5f044ac874237
SHA1 f0b617f277cb300f72bcfc864ed5fb5678cef6fa
SHA256 718ae253544e9af99d6d707a827e79764eb97fb0d97a2bfdd22f8037c4547eb1
SHA512 e6b362baf4aa8a49891be35f33c8b5d31c72105c65b7ef42cf60e7ed29edf8aa043dca7021299f2e5d6a46d872453063e204eb181a98b23bfc425524c3f7d42d

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/ArchivedEvents/171733328900002.9ced3b1b/e

MD5 4b444127ed1ee56bc86802fa73036f22
SHA1 d53ea2146563cf4178325063598b441d340fd01b
SHA256 b3c2ac4703525c2e07356b70c5da1ad6b7301ae1054f11984d2fb9820f919065
SHA512 a42979024611cbc9f642390971a02aad770318222e3d4d9f4e637d90fc4e6a1d4b35e2e3e9658965f662361660b39e6398df600a5a248a51248c38af7b4ec579

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/ArchivedEvents/171733328900002.9ced3b1b/e

MD5 5b36c03696054d8f146be3f697dd539f
SHA1 a7273a51b41f77212bee88ff5107348a70cd43be
SHA256 dd32830c34f9753f63ecca4b42b2139cf32528264e97fc1ec9cdeb400ddda7d0
SHA512 0035171b4c8ba4b21b71ae6bd61043dc5748715e1119a187a8269477713b27e53ade4581d481aecfdfd45de335bea1658d8192cc694bed732afec129a569dea9

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/1381250003_28x28.png

MD5 759a106983ec92f34344dc5064efd29d
SHA1 2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b
SHA256 1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81
SHA512 516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/zepto-1.1.3.min.js

MD5 54c9c5d40126e729d3eb1db81420c3d2
SHA1 cbee54076e1f1dce5f418d62e13cd12500a6ff2f
SHA256 9cfb903afa8a5c82d8f8f96369229337a2be8c1c980dd908168b7555f69a2e31
SHA512 ed72c4274d3d029e7334907f40d368feb3060c062823a182cdb84158b6936c8d7bf6bf8fedcec889c67a3641a658a79da6be5e11d7bea653bbdd6f5ca51cfa68

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/od0788cd_32ee7c1585c0b28eb40c4828fd01159d95a470c0_v21_phone.jpg

MD5 dba082e4be4c36c49893fd4c8152497f
SHA1 95a8cb8cc2577434d753dceaa591a534ea017732
SHA256 fdab37386bf56ee418ff78e46f9e6d890928691d4c9e4e5dfa96b3726a0e161a
SHA512 ecc1ea903dd68eead500c06b86dd149a96cb2b2c6241c29fa7be35eadc8c8c1b716e1ff6a1229b40b94659249c8deb3ca921c8087bf03c5c20373a1a2aef8897

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/45ed4ad24ec3c0f70330a31dae8b735f24c53e3e_v23_phone.mp4

MD5 0e9b6c237350a5cb71109d2a4cffb998
SHA1 e1045c77155903b17037bc8812fe353825281999
SHA256 4c9cb4b9aff5e4ac3da2edf02c78b78f24e5c49c1abdd0b86f61069eb035133d
SHA512 3f752c3b35f01ebad8bc37742bc1a879afc81d4f902002b3dc05ae3d04520659ea83638666b0b6685e1139ef52de67138c27dea5750b90c116a7a9869982c375

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/sound_off.png

MD5 d9a4fb40256f67255242c0f41a0d3de3
SHA1 1c99e725cebba2c3f5808d5e00c73af58f0790bb
SHA256 a7e16ed6d339c6a85870e5c18952f839d61dbd93d47dbbb49e7f7f9124cd0d2b
SHA512 a09d5d878cbf2f58ce256814b9d19d9122858609035b2c15e19e2da8171e36d0ffff4b33420d4d27233200b430307f1fa42459889b52f66e4282af8a84edb8fa

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/sound_on.png

MD5 74485ec832d65f19b05f5027220df53b
SHA1 49116a6b85bec84512241c9dc6e511ce10bdb7b9
SHA256 7a89be15d3a268c6820f385ac6d4585bf04b45e2fdff37948b2a73afa34c1268
SHA512 9acf56fe90a687ae653ab5014aacaeb7ad6f76982271df5f63e536a358f3f53b63f7e865fd8180bee96980cbfd4ba9b07b81977f86c9b9d0b41ca1dac0556657

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/oca2768d_27dace86f9e19a88e664543820f418700bb9157a_v21_phone.jpg

MD5 e6fa80a397a6b358672b18e683772ac6
SHA1 1b2383224f3c655dd026baff32e5c643e995b246
SHA256 2d62ab2f5806635fb34480dc063618a92f46e5edcade6f5ec7d972dcef9386ab
SHA512 e6ad06084232bfa70d077878145c6d341e3fb07beccfac497c466bbeade36c57a4330fe589d5b4fb430078d6876b7d04e7074cb8c7a9166f532a7ab01b016532

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/262b0697f5b375d4ecb37867878b8cb8e65874cd_v23_phone.mp4

MD5 e3fbf80537d29c32dffafe733f575af5
SHA1 ab14ee5652d7c36cf236c0ac78913d2f017e27b3
SHA256 b9d5b1bcfb51d2175f53ca3b564f09ff226ba489a15a849f7ccb0b05a509514f
SHA512 38597bc4181abb5c67aaedae1be3a86a3365fe99c31b1982985346ce84f10884fcc979f54c64479af78b9a3496671ac391f784f692c515959bdb13b0890a653c

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/ob3600d7_6bbf677ae8bdea4ad8e6921c7b4519aa04aaeae2_raw11.gif

MD5 6a8c041b996501a34233c516e9b4c283
SHA1 6bbf677ae8bdea4ad8e6921c7b4519aa04aaeae2
SHA256 cf1347b37ef9cf52d5ec7a7f328c3a70179d5737ea6bf80998642684190f7427
SHA512 44ecfa745046e46622287a5674c918262e1654d2b4890ad4997242f60c8d8b39a678e1cc75ece03a112975ad198c7377cec721462a4c6bd44fe67d416d2c9ea7

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/2ae6d7a07059785396db87952734413bbda9e139_v23_phone.mp4

MD5 32c0d459f90232743ee2f71f916f6b63
SHA1 f4395b834ec415f58607f65ec42c270a5bf4e22a
SHA256 f7d62b8582935d8cf937ca42635077cb83d0b40ff50f71630a766d2a282928c2
SHA512 e118e06521d45c2ca2b36ec86219785e1a17d32244d76822b4e06b328c94d5b2f745cddb18e5406824c01ac621875d5ee53c539185c1168f7fca9422571ba1c5

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/ocee368b_f3328f0f5f94c6dbcfbe324231284f0a86058db1_v21_phone.jpg

MD5 a04573d5e4a9f51acb9fd12b2a599188
SHA1 e3feb4e536e9864ec6f71919b5cbe29d429baa1f
SHA256 c69800fccf0b7e875424ef89cb9f1611a8295304c98026bdbb2315f218048f6e
SHA512 40d0179b7c731dacfc89a886263b9f66b627c8dac72b84b02447ab3f8ed80380ca4755fd735401a2044fa5d9715811b03cb3c61c74cdab321a85ed8dea7e693c

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/23fae7427f098bc2549cc2a2a0ee8063269261be_v23_phone.mp4

MD5 40d2c3a4e8f8f8f0ab548b70ebf6823d
SHA1 35d5e7da78cbdee511c8d9aad7ca1c19f01b4686
SHA256 c408539640f9d779187356078f999ad2a3c9bb6f24f628f9c39f24c9155726b6
SHA512 87e9c26bb275fe1cce2099c2f71869d3eb8a15f61cfcd84cb2460b7562547c54244fb0bb601943bfd90109dd39268783fc9e9f964e7a39b2728d0cc3dc366a8c

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-02 13:00

Reported

2024-06-02 13:04

Platform

android-x64-arm64-20240514-en

Max time kernel

145s

Max time network

149s

Command Line

com.mochibits.hexario.google

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A

Checks CPU information

evasion discovery
Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

evasion discovery
Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Loads dropped Dex/Jar

evasion
Description Indicator Process Target
N/A /data/user/0/com.mochibits.hexario.google/cache/1582435991586.jar N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

com.mochibits.hexario.google

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 172.217.169.14:443 tcp
GB 172.217.169.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.180.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 stats.unity3d.com udp
US 1.1.1.1:53 config.uca.cloud.unity3d.com udp
US 34.111.113.40:443 config.uca.cloud.unity3d.com tcp
US 1.1.1.1:53 s3.mochibits.com udp
FR 18.161.111.40:80 s3.mochibits.com tcp
US 1.1.1.1:53 graph.facebook.com udp
GB 163.70.147.22:443 graph.facebook.com tcp
US 1.1.1.1:53 api.uca.cloud.unity3d.com udp
US 34.107.172.168:443 api.uca.cloud.unity3d.com tcp
US 1.1.1.1:53 googleads.g.doubleclick.net udp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
US 1.1.1.1:53 a.applovin.com udp
US 1.1.1.1:53 rt.applovin.com udp
US 34.117.147.68:80 rt.applovin.com tcp
US 34.117.147.68:80 rt.applovin.com tcp
US 1.1.1.1:53 everyplay.com udp
US 216.239.34.21:443 everyplay.com tcp
US 216.239.34.21:443 everyplay.com tcp
US 1.1.1.1:53 impact.applifier.com udp
US 1.1.1.1:53 api.everyplay.com udp
US 130.211.33.175:443 impact.applifier.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
GB 142.250.178.2:443 googleads.g.doubleclick.net tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 1.1.1.1:53 d.applovin.com udp
US 34.110.179.88:80 d.applovin.com tcp
US 1.1.1.1:53 img.applovin.com udp
US 34.160.119.165:80 img.applovin.com tcp
US 1.1.1.1:53 res1.applovin.com udp
US 34.149.87.163:80 res1.applovin.com tcp
US 1.1.1.1:53 assets.applovin.com udp
US 34.120.175.182:80 assets.applovin.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
GB 163.70.147.22:443 graph.facebook.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 216.239.34.21:443 api.everyplay.com tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.180.4:443 www.google.com tcp

Files

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/config

MD5 be9c7776487d2e7acafe19ee6b8f21d6
SHA1 90810f66873caf39148ba339ce3beaa77e1298c1
SHA256 cb1fbaacc4744f268bfd751d7d4b3d8591acea8175dd4cffce28b96a3eb2886c
SHA512 b2eb531d818c211f83b35d98e479cd4ca4720e269b9a13a9e1684bd15e10dbba6ce524d8da1b4bbacd124f0a6daec0a6716b464b3cfd29be958b778f32d45d11

/data/user/0/com.mochibits.hexario.google/cache/1582435991586.jar

MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

/data/user/0/com.mochibits.hexario.google/cache/1582435991586.jar

MD5 fde2ee00cbd121cfab5290b078aa3ceb
SHA1 e2b77d5320e155e413d040a8c20020962065b2f8
SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
SHA512 a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/Unity/8aad2516-ac1c-4f73-84e6-518e82dfa025/Analytics/values

MD5 ae5213d1f0a72fb3c1cf9242958ad793
SHA1 36f94ba411c82ce82d365024b43a69f2b0afc6fd
SHA256 766a70553460bd3e3251a3f7f999711cf0d4061f75f4464ca391fe072a00a980
SHA512 59432e9580204fd2205f2b3dac2cf5ceac7e40ad6bb3f2411f20f30ba1191a9326ab891036df209b1af945a51d11d1d11ae5b64f21102d91f527204c35b6529b

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/1381250003_28x28.png (deleted)

MD5 759a106983ec92f34344dc5064efd29d
SHA1 2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b
SHA256 1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81
SHA512 516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/oca2768d_27dace86f9e19a88e664543820f418700bb9157a_v21_phone.jpg (deleted)

MD5 e6fa80a397a6b358672b18e683772ac6
SHA1 1b2383224f3c655dd026baff32e5c643e995b246
SHA256 2d62ab2f5806635fb34480dc063618a92f46e5edcade6f5ec7d972dcef9386ab
SHA512 e6ad06084232bfa70d077878145c6d341e3fb07beccfac497c466bbeade36c57a4330fe589d5b4fb430078d6876b7d04e7074cb8c7a9166f532a7ab01b016532

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/262b0697f5b375d4ecb37867878b8cb8e65874cd_v23_phone.mp4 (deleted)

MD5 e3fbf80537d29c32dffafe733f575af5
SHA1 ab14ee5652d7c36cf236c0ac78913d2f017e27b3
SHA256 b9d5b1bcfb51d2175f53ca3b564f09ff226ba489a15a849f7ccb0b05a509514f
SHA512 38597bc4181abb5c67aaedae1be3a86a3365fe99c31b1982985346ce84f10884fcc979f54c64479af78b9a3496671ac391f784f692c515959bdb13b0890a653c

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/sound_off.png (deleted)

MD5 d9a4fb40256f67255242c0f41a0d3de3
SHA1 1c99e725cebba2c3f5808d5e00c73af58f0790bb
SHA256 a7e16ed6d339c6a85870e5c18952f839d61dbd93d47dbbb49e7f7f9124cd0d2b
SHA512 a09d5d878cbf2f58ce256814b9d19d9122858609035b2c15e19e2da8171e36d0ffff4b33420d4d27233200b430307f1fa42459889b52f66e4282af8a84edb8fa

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/sound_on.png (deleted)

MD5 74485ec832d65f19b05f5027220df53b
SHA1 49116a6b85bec84512241c9dc6e511ce10bdb7b9
SHA256 7a89be15d3a268c6820f385ac6d4585bf04b45e2fdff37948b2a73afa34c1268
SHA512 9acf56fe90a687ae653ab5014aacaeb7ad6f76982271df5f63e536a358f3f53b63f7e865fd8180bee96980cbfd4ba9b07b81977f86c9b9d0b41ca1dac0556657

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/o7830d9d_6ac71583bcdc2fe0a01a3a7f60b49571f0f8f37d_v21_phone.png (deleted)

MD5 6ac958c0ad4709f130f84332b08da232
SHA1 ce41db526be138f4449bded8676670022034865e
SHA256 bbc72339adf5818993fcbc760d03d36d38ca6c90b7836f65e7fb112a55b9ee3e
SHA512 acf1c5abc3dc554a9e9442b78042f5a99942400224d607bb29dcfc8f53a9aeb845a589cb11b5e10eaed2b0e4b93dca9f5098aacee9a7d132314175186b8b2842

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/1292df95d32258b0080111faff108243f13eefca_v23_phone.mp4 (deleted)

MD5 b75be72cc7d717899e27fe402bae929e
SHA1 3fc603fee3aa43d9a974ae03c3e010d76e6a77b9
SHA256 73ce50bca99856596aeadf4d0a1bae648d502f813226ddd246373f6e18e35f5d
SHA512 a1b981c932b9b8c650fa7af5b0682ab03b9e39507c5408903756c407f75fa5e683121fc16643eba10590754311ad96fd15dec665c43186539f666bd0a4c2e292

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/zepto-1.1.3.min.js (deleted)

MD5 54c9c5d40126e729d3eb1db81420c3d2
SHA1 cbee54076e1f1dce5f418d62e13cd12500a6ff2f
SHA256 9cfb903afa8a5c82d8f8f96369229337a2be8c1c980dd908168b7555f69a2e31
SHA512 ed72c4274d3d029e7334907f40d368feb3060c062823a182cdb84158b6936c8d7bf6bf8fedcec889c67a3641a658a79da6be5e11d7bea653bbdd6f5ca51cfa68

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/od0788cd_32ee7c1585c0b28eb40c4828fd01159d95a470c0_v21_phone.jpg (deleted)

MD5 dba082e4be4c36c49893fd4c8152497f
SHA1 95a8cb8cc2577434d753dceaa591a534ea017732
SHA256 fdab37386bf56ee418ff78e46f9e6d890928691d4c9e4e5dfa96b3726a0e161a
SHA512 ecc1ea903dd68eead500c06b86dd149a96cb2b2c6241c29fa7be35eadc8c8c1b716e1ff6a1229b40b94659249c8deb3ca921c8087bf03c5c20373a1a2aef8897

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/ocfe6a63_5f458a958915e9ded55ce4810448452f3bfc7b65_raw11.gif (deleted)

MD5 cbc5415ee284d959b09bb951b80ff986
SHA1 5f458a958915e9ded55ce4810448452f3bfc7b65
SHA256 82b36a96e1e8315c7043ffff1249d87f3b93cd132a07c465d5570347a4237072
SHA512 7d2bb90aeb96537ee749a236ca898cadbc52f17bd4a8827eb3e9ff734b775153206743114033e920ea260013895c5a9d436159c48c795ec49a4e5b871bbb1d57

/storage/emulated/0/Android/data/com.mochibits.hexario.google/files/al/7d20f62a157bd884109920655b552d0f2e7ad990_v23_phone.mp4 (deleted)

MD5 24d56e552b10498c3a873bd6eba97b0f
SHA1 54da191c8f2339aa6118a3bfb6341bd6a612e4db
SHA256 5855da0d71cdf9202794b8d901f7f842fd40d9840b8fd97e18dbd289311f8849
SHA512 432c2d5b0eee54304408fdd55e9e1585cc59307b957834430b762d15383f0bfe0f8076bb92b3fcea390107f6e8b0a947325ebaa68a464c66bccc992dbe45237c