Analysis

  • max time kernel
    179s
  • max time network
    188s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    15-06-2024 03:53

General

  • Target

    accd09bf4b4ec9bb71a0d13cc7d7c5b5_JaffaCakes118.apk

  • Size

    30.5MB

  • MD5

    accd09bf4b4ec9bb71a0d13cc7d7c5b5

  • SHA1

    28930816dc9cb54f8f978beb6a6a71eb9d18d4d2

  • SHA256

    ffb1fde7a6de7df6363a06db9f277a8ec74c5c143901e4287aa8974938a88036

  • SHA512

    c27bca741aa89eb89d3157813b70c22436837952a1072b353413418d0c33acaa76d33b8c7fdea59dcb1bb2161d8323aaf1966c78a97420b4bc854d866f7fa18c

  • SSDEEP

    393216:ft7uCm/f5fN8hPXoUOa7zJ6jhEcJb86vdAIBU6mIJO7SCBcmxN6ca:f16f5fN8RXoU1Hir186VtRmP+ZmxNM

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Requests cell location 2 TTPs 1 IoCs

    Uses Android APIs to to get current cell location.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.feelingtouch.gnz.realistic
    1⤵
    • Checks if the Android device is rooted.
    • Obtains sensitive information copied to the device clipboard
    • Requests cell location
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4482

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.feelingtouch.gnz.realistic/app_data/eventlog
    Filesize

    562B

    MD5

    f9cee186e7a754ecc9a9d6d580f406ac

    SHA1

    c01e922b2244539e4378119bcd1244df5f3711e4

    SHA256

    937fda3faa50b13932746787c41a1f6a5b34951badf82d6e00f3889d41084940

    SHA512

    c09ac5727efb1d70d44dc5a8a4aa580dc5cf9e6a3777b14df4c44fdc20dc1bc4e86117cd81b60d173bcb75c7485dad180a785f4b538b1d85b586845871b4ccf1

  • /data/user/0/com.feelingtouch.gnz.realistic/app_data/eventlog
    Filesize

    564B

    MD5

    de589cc95c65e07b4b7cb263bdc3a0d5

    SHA1

    c7dad549904aa960a441e5d1dd404d7c2bece846

    SHA256

    890b07da5fa6904bcf3ab871a53a41db745aa112d722832cb2e4414ff7e1fe2c

    SHA512

    1d04ed192bafaef72ddc6b10b610f54964fb04cfffc4a9e83a8b44ba4d0f4767cf5cfb3b8e5c3e9ef2feb85af6cab6cd8b9d0d51016bfebb411b1c52a84bd994

  • /data/user/0/com.feelingtouch.gnz.realistic/cache/__chartboost/CBRequestManager/87523452013
    Filesize

    330B

    MD5

    c4c0d7895b12524b6a7500b8164398dc

    SHA1

    ec338fc68918542e05d6f5c9308571714b2948f7

    SHA256

    277f6819eeb98722e778c441c9d90ab9712a3549761d2bcb06507be437d607ca

    SHA512

    2955c580f8bc87d8a2f912d5938e48687348dac85a3b1993bce90f2e2e54623036753b9930f33d468103152ecdaef87a28acb29aac6a79f85f021405dbdb5f44

  • /data/user/0/com.feelingtouch.gnz.realistic/cache/__chartboost/CBSessionDirectory/cb_previous_session_info
    Filesize

    189B

    MD5

    81c5b43cfffaeb5047cfcd4b06b0d14e

    SHA1

    8415ceb308e3fcfb8a7d93ac5717481a9f5da148

    SHA256

    d7261793097a281bce659d5cc2c8c96fe9409c246b389aac834046caeeb5dca0

    SHA512

    882480d75150b12949413b9af74bd847e2f36a73c2dcbe880a0e319d25ae4bd2a3420b1774d3bca96797c372e009d0f99a80863af6ab7d6e7f32b0639d100853

  • /data/user/0/com.feelingtouch.gnz.realistic/cache/inmobi.cache
    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/user/0/com.feelingtouch.gnz.realistic/cache/inmobi.cache.data.events.number.network
    Filesize

    1B

    MD5

    cfcd208495d565ef66e7dff9f98764da

    SHA1

    b6589fc6ab0dc82cf12099d1c2d40ab994e8410c

    SHA256

    5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9

    SHA512

    31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

  • /data/user/0/com.feelingtouch.gnz.realistic/cache/inmobi.cache.data.events.timestamp.network
    Filesize

    10B

    MD5

    ed1c7198d6ef94950245b44468337f9d

    SHA1

    17c091a3318edfcfcbc0c7ee8f29adcd04e5379d

    SHA256

    4a1abcf01859c10dbbbd4001d9d27bb6040027abd7ef3f1c0ae290174cd39949

    SHA512

    93bed2477dbb563ad413b8b44feaa353db9936df8ff97e858d17ffc5312860656a14ed4f12df95d477018779519b5bba01182b5c7d41bc341797f6d393fbf1ab

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568
    Filesize

    16KB

    MD5

    f2008aa2e70cd412b6b983a6933fc932

    SHA1

    3680001ed8ca51af4f1100b1c077af0dd4541f9b

    SHA256

    39850c79b8950a0549d0157329f9549f3e04b60fc747dd3e90212edb27b5a71f

    SHA512

    51c9e69a4bb56ef66390662338f782d9a7da2cf0196337d1a86166d56c5b4a5bf520c5dad968e77f755b8be0639f2e2935d95aef18a379b7fae2f4fd4971bbf9

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal
    Filesize

    512B

    MD5

    21f75311dad274c15e8d130f418c74de

    SHA1

    5c64cdba9bfe53299055919fbfb2215c166bad40

    SHA256

    7c2add56a37c0f3eb223ddad959611f0374a97124dcdf78b4af3b0d277fcf295

    SHA512

    fd2b163493a81deae90bad987372ff67a47f3665dd28bd5053b846c8249267b54cbf50567864cbaf2ba9939989aabf6692e6fe2e2c90be77d3497ebf42f366f1

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal
    Filesize

    8KB

    MD5

    d6c431246382693f3a14fc930a47e259

    SHA1

    0198766ca3b70b59c37bb3a6b6db879a1f5f8df6

    SHA256

    e320fbc3639e4cfabd56102ddd255237f4b595a17f3a72be891362282e480d34

    SHA512

    e5f50f1cc27bb5e989007ca09ac61171904d277ede755701c01f51a74c1c91a35c929b1d86a38dadbf86ea5ecb37c27df01331e425f786c484c72f5e14ad50c3

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal
    Filesize

    4KB

    MD5

    33fd6cfc7fcd73c8f403ae5ffe364db1

    SHA1

    7a455cee79ebd247828b52a379a33904c637f61e

    SHA256

    0e19aebecd2ef38e4fc3eda9c99c25c5fdf6913f0052c7427c5810b65834c6f8

    SHA512

    2ba36b635117044ed01c757a125dad79386e77376341e9f76f6ab6e7bd4f33fa4ae6424a1d92b74d434fa0bf877fb16da3a6cc078dda85f978eafce26f01fb9a

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal
    Filesize

    8KB

    MD5

    e3feedb2b35d613da5feddca09575592

    SHA1

    50940631832b1add56920237a1f6de045352f0b4

    SHA256

    acf4d14ae16d4605da401efa21f9a13a5267083aa8b77a2a449b764c028a4abb

    SHA512

    e4ecadafa2c7f3328b6e1637417217b5574dad770d4c7be7847d15d32127a9877cc7193a2dc3114e9bc550ee9a0adc42845e63a56060cef7459c5d7957b28ebd

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/countly
    Filesize

    28KB

    MD5

    aa6c4c68f0e3a03ef423acc12a496e48

    SHA1

    411350944935f0a2e8d334335e7e2a9e258ed5bf

    SHA256

    777b32f79854adfa20c9c4fc6e6076f4f1c022acd863ed18fbb709911dd72f7d

    SHA512

    d649b08e5af8fb918d254c4c6505cd5f54b4c4e2d659204b64d21f3c141f53b6e668f3a23365d8b926cda04cbb5af7c34ed941d79bfa02d502d481130ef9800c

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal
    Filesize

    512B

    MD5

    b16dd2b494e92c9eed14c49266a05b05

    SHA1

    a94103358abf0da9455108cca728823196ae4508

    SHA256

    43366be8b826e5f5c0c0d3003cb8027351365d6b51d0319b8f6026618235e182

    SHA512

    9c6750da61934eefb4601beb9d6da13bcbf4b98416e045efa0d9e27cccd15025c461891f79e6f751cf5b224964fdf24d43be16933abd30815be426784f94dd78

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal
    Filesize

    12KB

    MD5

    20cb404f48efe3b31f505accb5ef5c91

    SHA1

    4a245765c8e3938e1a90d99d1c7c186827dbdb0c

    SHA256

    e4a457dc128845ee1b378e0244d39f73f278bea4555ab1ae24b6e0f5895a3ea0

    SHA512

    5254de2ae7a39e429eb9b03a185221e13d493bf43b2e952de2ba45710e482104114a6eeca48c5f2bb913b7d18b80c533986bcb1f3da00bb6884d7c98b2572c71

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal
    Filesize

    8KB

    MD5

    be3c382fa81623a66745507256b0c1c8

    SHA1

    8a0994c9524573989cacd41062e653b6c5f8dfd9

    SHA256

    63d8600eed473d3258dae2f56a3e7a50ed32c8b92d743b64a33f0d2554e07f41

    SHA512

    4454bcbaa647e94937b592950ce6bb382eb896722e6f5ef650c415d355df4d46294f984cf33333a5d0a0b49ada58602e55a9901e34ecf159ab9dfb8d1a974d0d

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal
    Filesize

    8KB

    MD5

    b223446a58332fd53d6bd6126df40c7d

    SHA1

    40f92a1e936dea3e436adb9aa119545014168081

    SHA256

    b42fb4423f619c9099348b3693f59c949f5d830eea3e025fbb767f484a9e8e03

    SHA512

    cbd9803ad56d49c110e11b979836d6b95d6879ef29dbc22f4a5d3133acaa4b4aff7d7db8fc369125bd59bd0410325409337dc2dde322266d855462073562372f

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal
    Filesize

    8KB

    MD5

    b9f51551f7552e4702b2a92ec244a115

    SHA1

    8f129185c50476bf8163d464d249faa5e719a2be

    SHA256

    51ca2e806a8ecfdc5a1674b5c8e0a216c40a478eb079ed078f64d1ba17484ee8

    SHA512

    0694ff72100eeb64d80b5870b3272d03c442db58a3f3db6562e028978fea75f672a90538263dde225fa964637d6d27980668a06ba115ddf0dea6b290e1e8ac62

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal
    Filesize

    12KB

    MD5

    f4d16a2e5e910a55b92604d496e9c56b

    SHA1

    e87389209454a42d146694da3307a59872076882

    SHA256

    470b9eed26ab98b3767cb5a2734e82ba7e5c8cb1669387ef3b35e35dab86a855

    SHA512

    f10b6ef6ccd37f6dad4d9846742f442c6a863b50da6b3a1f703d70569a8af48b31a83255a8217c9f4096dcb1c72afea267edbf9f14e81d6ae95408497a58810e

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/im.db
    Filesize

    16KB

    MD5

    51bb486fd3c97746e742e6ace5d1d6c1

    SHA1

    458db8f97667392ff2aea446758ff37018fb4e8f

    SHA256

    32f3998d18579c5e019d2d26fbbbbd1bba3cc20c3cfabe3221a9b5bdd73d3638

    SHA512

    829c638d843c3fd8f61241a680ffbe913d87df72a0a1fdc19ad778e8a67dc832badd730e4f47d922a69f5e5b8a61580a71a91097ad7ec72a435626491551e7cc

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/im.db-journal
    Filesize

    512B

    MD5

    3c14667f08c4f0b72edfcf5573e37831

    SHA1

    226358b62064c65f446c6e61de0400eac7d290ed

    SHA256

    df88a570e59eeee7823b66ec7b90d55d6399ee04459925b48a2545400042e66c

    SHA512

    a1c42a1cf52278ddfcd2289fe1fe8045dc41c0e841f42b0e58fb743599c49603a480cfec95e6021241f748f1491e7acbebc9aa19493ffdd26ff78eec748a2888

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/im.db-journal
    Filesize

    8KB

    MD5

    fa1783eb7b1fb76587503faf19ceb4f0

    SHA1

    7ad282cefd6aae09a0ca7fff8f5c9bc12604a56f

    SHA256

    d12a8a1535461549dd08c69b1846ff39b14c7b725f4160b02a90bd71fc1e07b4

    SHA512

    f4cb40a583441e4a3942ea06221080128d91ab8d6a8068c88cea7fdc7cf0022bc157ba7b35334e2dc3f8ec2b4f57048ccf148de52de71251c8354b971b526bba

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/im.db-journal
    Filesize

    8KB

    MD5

    01e193d99ca298d45e641329e38c03ea

    SHA1

    2c3438be577d35a5406baa676911883cb7aff54e

    SHA256

    0bc575a13314285bfbd4f85a57ad8f36a046f276304da935c2338295eb161d94

    SHA512

    d4aeaa706fe142aa1cbb97299c87a5fa22e13d4b68c7da39e4aaada48ee200d69f5e2861ff1ead7218949de3354021265f1564d865362bacefb317bf2ec51fa4

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db
    Filesize

    48KB

    MD5

    a486976c07f1867a7783ccfdf5073697

    SHA1

    e99abef1032986bddb36f26558e601e4f5750ca5

    SHA256

    e18fc88dda801012cb10639405990ff69c24aac028d9d9b86179cf4727c3f485

    SHA512

    1fa5635b1fd5ecabae9cc654a9637384f501dbb69dd77cf793cdc4ea7d68d5ffb2bfe55aa012bd4f667dceb7af6f6c171411bd59f31b6730a11f32b856593ab4

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db
    Filesize

    16KB

    MD5

    f0c24a34a80c1730f30bb32c6253bf4f

    SHA1

    c082d5d8a72c646b44e83d8dc30f031b9a6beb32

    SHA256

    9002e08266a4223e651aba613572d0fcc23f9c7ef5bf4c1cfc7377e229d97754

    SHA512

    9c680e1e028b99afe77514fb67f331b1a975bc2d9e5ed2f989749eaf6e3d6ab0c8b80ffc25a07e27468130904b898ca1e808fdecd6d51e859768aff15d949f3a

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal
    Filesize

    512B

    MD5

    8c34595ff6eced20554fb7f2a9cd1c6c

    SHA1

    1d0865788fd9a6910a32d6f5d5080b9ecf91600d

    SHA256

    ea38588d31047504f976737474d5e0508a8adc1fd4e2a9f09fa0609f5cb8a5f6

    SHA512

    d6757e721c7952c8137171c1ae25f90a45977649fe7b93cfde660599e98e0335ff396ed0cf307aff9bd85459ed9de266282c4da18b7d4993d28de99bebdb1012

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal
    Filesize

    8KB

    MD5

    46ee4568955a2b577eba78bda82db90f

    SHA1

    9726b3fba16fc41171cd9ddd2c35722ad17de65b

    SHA256

    66f6693b84cd27d72a678539b16c7a8fac2061b34f040de8942ff4c93c1717e9

    SHA512

    18045d609bd659b6c6c7a82e2f2ef29f5ab48debe4bcd418934a5dd08720e7a57a804ce2aed4ed94da7141d9b14d49f039d26f3133f6346f2471cd2281a6d8e8

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal
    Filesize

    8KB

    MD5

    b16cc01a6c572fbdfafb3e17558ae44e

    SHA1

    15432c35d96259dee2c01eaddb79f2ac37c80de5

    SHA256

    579302391bbf7e770d277bfcac7f6c864e40f13fd9ecc6f4ef7d551dc7cab1e0

    SHA512

    dc2c5c43628bcf88b3dafa0e3db5e8c7ba455b55e50b4839d857f0bfad0976263026116601691d44b3e88563795f1d07a04727cd644a52b5cbae04b9be1c79d0

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal
    Filesize

    12KB

    MD5

    71a4c74ff3b93191470c94e50a82ac71

    SHA1

    09fe657adb0e93cc9b508eb9b0060becd70241f6

    SHA256

    62e5eedfc7b56692bf4aa2623d3be73dd8cdc09b9247598262d98e7d684286ea

    SHA512

    b78d3f163c2e721bebe837ce4b363c1f628440a9cf1994e680e827c4fef387b13725ca7d70d6d9bd9e6e85948433ca873cc2aada347f8684816d888b6c3cf332

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal
    Filesize

    8KB

    MD5

    5729d1d82bac3bb0b009e944a896ce42

    SHA1

    4b0fb770adf5895e7f42b798ede560b7a26abae9

    SHA256

    bb5f201fde9b3bd814380f4cce33673c85d1f6e13d38120705ca217e5641c65a

    SHA512

    6fdc17dc93db4f9048ec82c9cf030e4f077c175bdad36d20491ad86043925904650f0f332a134f62949e04784bb6a36cbcd420c52d1305bc12712bbc8e4ba6d4

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/publisher.db
    Filesize

    28KB

    MD5

    c1c2cdd3a33d74a78e90edd75cbb84ee

    SHA1

    7acd42fb578bd72f54c85f263f39ae6e7de679f0

    SHA256

    8e23335f178da3af80cefc74372aa9786bf989f13b9022d9664ecc08ee7a5c94

    SHA512

    d9f24cd388aaac97f9a0f8a88e9f094867b93c9455a93e34e26744c7c59ca9af98ccff9b775dcdbbbfe3b699f2a71ded322327d130c39f3cc38d459e0a1ac54e

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/publisher.db-journal
    Filesize

    512B

    MD5

    87306ff19d4331fef79d2d86809b0b77

    SHA1

    2fdaf790ed21d8a24da9432b319570811b6d1329

    SHA256

    7fc9c602467a80817c2704c524be8d18535749fb09a9fc358b015b2d90b8a745

    SHA512

    f1413d39ac86126ce809788af17bb16dfd9bece8e409a54ff91098afc787387e6fe71c2ccca0c408cc32fb6cfc2e3556d0213b52c9910b7a38ea91e697fa3756

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/publisher.db-journal
    Filesize

    8KB

    MD5

    9bd370285f912d5b3db3520072ea1a59

    SHA1

    254ed8389e7e644443b2129575aedd8503f0c4f0

    SHA256

    69353d5d1a035a1d7503ae5ee8a5e082e86ff0da1374e1cc820897511fffe06e

    SHA512

    14bc91f7744dace468488a8421b121252abf899d93c482280ddf2e918a7ad9969de45392641b422ff39b0e688a88dadf2f574da3535bb4ab1ae172485d37a611

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/publisher.db-journal
    Filesize

    8KB

    MD5

    2d8d5423069117cda08c8923ef517ba8

    SHA1

    899a24d28a39079009fc2081f8bae917d72a520a

    SHA256

    ae5a9bd936194726466dde36766ed00a9efb303d1fc2738a5fcdd2846ca562fe

    SHA512

    cdd6d713926b60cdcd0825c853ba930789ffb8033dcfe77f1ccde0376ccd90bc754594243fb8bb17d2da5a426d9d7fa48ff0d00f496c3e09f8d1301c40e727e0

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/vungle
    Filesize

    64KB

    MD5

    64346aa5a550a310ca7c6e31d0d73469

    SHA1

    0c910062d9c1b8183beee516396bb67fdc39b67d

    SHA256

    1af107ad26b8b415ce41a67bbf18f511f411180ea59adbc03ce37dcc9ad727f4

    SHA512

    2dfa3d671a51fe4c2e6f035bd842e7cb3b381078963ef183f2c9a1acbe752e525997d735e12e61d570492a87647bafb13be0a58d78059e2c66dbc04e7a0b486b

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/vungle-journal
    Filesize

    8KB

    MD5

    acad477ebb895ecf512aa2d0cd98ef00

    SHA1

    e728f3b46207cb861a8fbbebb8dc807fbd128cba

    SHA256

    2f826af008624798497721eb98ec3911555e10151ddd829eb9ed48e76add14c1

    SHA512

    6fac6af60d74b39ffb5c98137ebe37066a6ba7413192418fffe2d3d3c7fb6683691e29eacd5292f10701cdcd1dcc45e176c311ff09a1f556f7d8c458368099b2

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/vungle-journal
    Filesize

    512B

    MD5

    c7936b1a1a649236726f6acf48d630dd

    SHA1

    b0bae07ff19800d1b70e5f1839705b0115663fb1

    SHA256

    78bbcdfadf8171dbcf81a61110dd9692aa9d8b8befdebb396cdd71ef833fedb2

    SHA512

    7046abbb6b954647f6d8aae6481cf686653f2739045e2349d50a694d7cb4dcc8e8e1033282abddbc7fe908ef27b5300bc68210066d4f03c6121676732e8b7610

  • /data/user/0/com.feelingtouch.gnz.realistic/databases/vungle-journal
    Filesize

    8KB

    MD5

    5fb0d33d0edad60d309576dbe9093e4d

    SHA1

    d6ddf2519e4f8169e2e99dafc95a0e89e98bfea1

    SHA256

    ced76973300bf6bd04ed97553a5f02d76599ca214a43e2a4810a6ebb4a69ed46

    SHA512

    ebc70668d45a917517088968c4e1cc8d3c1b557a4f6d67d3e50e258ec71f741da5f9bc7a4ddbdd293b2c7ab7eea398040a162c05bbe39cb6165297a4ab5216ed

  • /data/user/0/com.feelingtouch.gnz.realistic/files/AppEventsLogger.persistedsessioninfo
    Filesize

    495B

    MD5

    330627269e27d31428f9ed633d5154e8

    SHA1

    60bdb74f7917523767531add37e3c3fdb6c0c7f8

    SHA256

    3be89d80867a55ea3156fd21776f81c6141ab79e7b1e58932a2e1eb342f2df27

    SHA512

    ea8e831212bd0229ae8df5e267ec09ad767164cf06fe6521b337f4d3527f7658ddc46b53eba09c42af6af2aa9556ce19814896cc3b832d69c513fd7f68e7ca70

  • /data/user/0/com.feelingtouch.gnz.realistic/files/Tapjoy/Cache/305e92b552f0b149f572e401c5e9b4fb1d1c5bbf57888f31b39e47b04b42e92b
    Filesize

    3KB

    MD5

    5de4c723cd74e72aab3768c822b59f6e

    SHA1

    6bcf0e7641be9d5f6a9a360239ea17180c5c24c4

    SHA256

    634117884ad6e001da18755836bfb8a3ab8140a00d8e8e8a5ff401fb8fe31a4d

    SHA512

    f3d074e6fba27f33522f58efbdcc07ab5b01ef3c7f86ad62ed4fb15a25441e8b915f9a5160713c01ed4fba74dafbaf0523f2a172a54e5fd8e8008f3799b426cf

  • /data/user/0/com.feelingtouch.gnz.realistic/files/Tapjoy/Cache/72cc2ce4c849a74a571306657b38154530fc013c5619d2756cb44006b71281df
    Filesize

    23KB

    MD5

    cebd2eac9e5d22dde187020b1456ba55

    SHA1

    080d9bf7be8dcd1d0be2db35b9f377313e2ca64b

    SHA256

    d65370d78e962ec8db098b0209f1de275bc20df21e4889a5ace5c818968c4091

    SHA512

    3b90a1944af8cbd4f15b2f2c8963e69e3353b47a0ad1205ca79bbf630efd2a66f9e1fd66a3a862bbedc997af3ed29cfd9dde4eb6d2056aa074e24854542a9432

  • /data/user/0/com.feelingtouch.gnz.realistic/files/Tapjoy/Cache/fe34bfffbcd29b1755f133c19aaf4621aef426e082ee6ff530f12b91de36a0bf
    Filesize

    49KB

    MD5

    ef998efc9d10eef6fcd3d5dd8149c84c

    SHA1

    1c5089ba85c24230fea9b646e7c860354f71a03d

    SHA256

    a84b4119c5ae21da53194e5dea2ee3f9bb12e51da81dcf8f1823305603262ee4

    SHA512

    d3c937fc1aa8490d5348a73efaab7d28f1af4e20b3e43189364344efbf6abc2e2d6ed6dd03116d014ce94346265e6c293e01545bf246d57d8ea477aac47ec3e4

  • /storage/emulated/0/.gameAd/com.feelingtouch.zf3d_LANDSCAPE.jpg
    Filesize

    113KB

    MD5

    7c9b8726e2028a3e5bf0494db1d6d0bd

    SHA1

    c357d02aa55f78b0c458f45e39fc9b2791a6337b

    SHA256

    809e5efd83df13416a5a7223d8c09eab126b1d37f9b73a7f6ad9ae0c1ee1de4e

    SHA512

    9342b01c3c567324cc9565bf0da781173e5040256609271023dd2c43f339567d0d04ce27d351418856a1a1df30d53b8bf1a4d98305b4312ec560b2107b9d2d61

  • /storage/emulated/0/.gameAd/icon/banner_ad_ew_en.jpg
    Filesize

    124KB

    MD5

    a1d367e6b35e9cc2aa8a047ded5bb916

    SHA1

    1099eba0e4f588b02bb6f83b07fc8f5891f0e2a8

    SHA256

    4e42c09176ee94eb91eb97e9942539b72e006152f9e6aa2ba97f39c176382781

    SHA512

    882c91c4211dd753e77c176714e1c798a6216d7f7d369b5bc650d34b3e021f694a611d965dbf43b1f73fa0c19e7a7aa903cc8cd8322d7a51b6b3cbc823f0ed22

  • /storage/emulated/0/.gameAd/icon/com.feelingtouch.empirewar.png
    Filesize

    23KB

    MD5

    ad99b6eb4ce6ff8cd581b8a57652406a

    SHA1

    f79fed773182e175ac40a7772a38f7e730582e8c

    SHA256

    cc0c2ef416154deabe1df8a73577f8e57f87197ef4309b4f6b82f33307e5e58a

    SHA512

    d5bcc55323b3a765605061d8914a9d6897d27a1747caea82ebcc60488d19cd744cde6d3a6aaab18615f66ce45b80bfc7ef0cbb4c1d607d54f5981ad14ebb5a6b

  • /storage/emulated/0/.gameAd/icon/com.feelingtouch.zf3d.png
    Filesize

    24KB

    MD5

    3da6f40f896b20f24a822b54e58240ff

    SHA1

    9a83d1f9afd2ebafb71d19f765a437090dc64c62

    SHA256

    897d091c5c145323e3269093e94c93e4c51f67264b112041f482d522a823c81e

    SHA512

    98ffe7100a953f54d04353d8fd432542146227716a064701e31632745a36c7424841d84133b808a1002d3c188df7c6fca0fb8a432432529d5bcb82c257148158

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/1381250003_28x28.png (deleted)
    Filesize

    539B

    MD5

    759a106983ec92f34344dc5064efd29d

    SHA1

    2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b

    SHA256

    1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81

    SHA512

    516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/alvideo0amp4 (deleted)
    Filesize

    1.2MB

    MD5

    4a1ba803c37a96184eaacd9e3b0707a8

    SHA1

    fee96ca9c99b45a5613524fa1fbd2368158fa65c

    SHA256

    34bb868fd88e9a2860a8338f6bd3338e96a6190831b1ef0d982b475a063a3eec

    SHA512

    cd058da13ea815c28ccd4c7030ef6649e21335e2619cfb509bb5d93a166d206f051ee09cc5b41ef3370e95cdc4e715c3b7da986fd5649c5c00144e9e49a9a6cc

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/alvideo2amp4 (deleted)
    Filesize

    1.7MB

    MD5

    1be5775484b2f6676ceffd32018a99cf

    SHA1

    42de7f37dbc45772c8f47299f7277913cb494c02

    SHA256

    4ba1dbb1b9b39db409594e8aacd6ad03cca19b75f1703648418ff3bc43274dbc

    SHA512

    3df083af8392f9380cbbd2b448cd1f79bae4afe9d58b13a0958bd03ab0012140667f29f3d5c98b607a6a54eafa308f30f339c287ca1167383266f136b944f959

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/alvideo3amp4 (deleted)
    Filesize

    1.3MB

    MD5

    192b055a9f0389f30770f0c929a7f212

    SHA1

    42a0fea07190df76b18b3dc953d474b5370900c1

    SHA256

    f69157c06ab30b8262034a08435689840853ae7ba3b70605cd5b6b04565a5a8f

    SHA512

    7b3066de3e5a2f2c2fe9669b74afaa3674fe51562efc086cec3a619ea913ea943f482fd3066255ec311a7c3ba871412e6b9f1ca8e45b77ebb3b57035e218a34b

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o66b33c6_09bb70ac78bc56d354c15fe18f465faa201d2749_v21_phone.png (deleted)
    Filesize

    521KB

    MD5

    52017a0892c4170424908bac608873a6

    SHA1

    09bb70ac78bc56d354c15fe18f465faa201d2749

    SHA256

    0d6807cda2b7b305d0aca0c4fc278a1abc6c53652e12e0712002bc281330bd89

    SHA512

    d7f3327521d577cab2b76695b4fd3c5acdfe436ef1785df8026329ad2b1ad55c03bc0d5632578d15a479d45fbfdf420ea199051fae40c0b73ff05125d13529ba

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o66b33c6_c50e8b9addf4ffc7adb409d65b81db37281f1fa0_v21_phone.png (deleted)
    Filesize

    493KB

    MD5

    569546214f143f2b51c888743e3450bd

    SHA1

    cd763124ea3f6af3f6000cf735792206b4db4298

    SHA256

    8872195f909b1f7a656bec84aabbc74aa93431c3dc44fd2a7c3ec107443fafe2

    SHA512

    94dbe8fc36d55e6aa51739b6884c4e0f283ab36f4867ed72ceafde96fee582226ff571fd7abaef58ca097d3fc3133d14a54beceed9783a99b61f60070d474adc

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o8570f5d_76e4df552abea94498ec1c2d1b930ae4a179efc8_raw11.gif (deleted)
    Filesize

    758KB

    MD5

    c64c6daa7744730fd645f822078062b0

    SHA1

    76e4df552abea94498ec1c2d1b930ae4a179efc8

    SHA256

    837b0f777ef831011f4133610e47935fe05c5af1b9c1b0a23a7210498a1cfbea

    SHA512

    b1e4718d220ccc86bd1e7ae14b2312853233573460c86f9e1b380145c0f0e7bdc503f18a44f0504b427420a8301155b6655886b502f2a557b59ed1945b007971

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o8570f5d_cf0d74a144f3261c6755581910c8c73f4d217c2f_raw11.gif (deleted)
    Filesize

    819KB

    MD5

    6abaa6685bc581407cfe4e7580746c3b

    SHA1

    cf0d74a144f3261c6755581910c8c73f4d217c2f

    SHA256

    8908732b127238a3ed7180af4d74d5e02028d03f7b6f90c3575c0016f213700a

    SHA512

    7a09cad7433f6d3aae9f748b778128aeec32bc9ea6b0c778f4fb839fcedc49ada97130b6eb68c5b130c1f4d61009c2371142acbdbbd36099d6073bdd1df52bb9

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/od39fea0_7abf9270b69e6e2639919fc6a0cd1e563ba923c3_v21_phone.jpg (deleted)
    Filesize

    76KB

    MD5

    16b6ece075343ff146c9504bd73ee0e2

    SHA1

    7557fe516c8545523d2ca1bf56017b4497a77c16

    SHA256

    40b1e78a14d5902ef2b76c2ecf05aae49578999f3280afc8c7ac49fe85185d68

    SHA512

    795a0261a729cdf55bf29176a20c6a6634450187a448c401ef2565c95ca67e43d12a389258983140c1e8282c1308f4b1b54e45053791521cba5cb134c03ec842

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/od39fea0_d5af46dfce4703c6fcb0843e61456a0504f84a28_v21_phone.jpg (deleted)
    Filesize

    97KB

    MD5

    f59bd413684db8ae54278f06e516d5fc

    SHA1

    60dedf45a602671b9b6bb31833dc7d777703d35c

    SHA256

    9abbead0166db07e253cb6015dd49df4efe2afe34b42ba4270b96d3421e8148c

    SHA512

    fd4eaae331f6932c8d5f469c85dc08a469212b83e7cc6fa57402be0d72d5a7ad0f67336c541c8484ec60bec65cfe57054334dbcb02d5e4a196c5543e2d768e81

  • /storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/spinner4.gif (deleted)
    Filesize

    12KB

    MD5

    2fbc75a0bc67e70efcd02f9ca5ad178a

    SHA1

    e2410a028e70becf3c94c8b5c313feb53b125a5a

    SHA256

    7fb6ec21540ed959f2ba7842c6b95903267d612009748ca43692112582a70187

    SHA512

    2f3979093bb0fc2c5e2929bceedb223457edca5ffccdcafa909007003d9a74813d10f08ba58b818bc81f5c796c74c5c9dac3d165cd6603296a45cc8fccd0f704