Malware Analysis Report

2024-09-09 16:00

Sample ID 240615-efwspasbnq
Target accd09bf4b4ec9bb71a0d13cc7d7c5b5_JaffaCakes118
SHA256 ffb1fde7a6de7df6363a06db9f277a8ec74c5c143901e4287aa8974938a88036
Tags
banker collection discovery evasion impact persistence credential_access
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

ffb1fde7a6de7df6363a06db9f277a8ec74c5c143901e4287aa8974938a88036

Threat Level: Likely malicious

The file accd09bf4b4ec9bb71a0d13cc7d7c5b5_JaffaCakes118 was found to be: Likely malicious.

Malicious Activity Summary

banker collection discovery evasion impact persistence credential_access

Checks if the Android device is rooted.

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

Obtains sensitive information copied to the device clipboard

Requests cell location

Reads information about phone network operator.

Queries information about active data network

Requests dangerous framework permissions

Queries the mobile country code (MCC)

Queries information about the current Wi-Fi connection

Listens for changes in the sensor environment (might be used to detect emulation)

Registers a broadcast receiver at runtime (usually for listening for system events)

Uses Crypto APIs (Might try to encrypt user data)

Checks memory information

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-06-15 03:53

Signatures

Requests dangerous framework permissions

Description Indicator Process Target
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device. android.permission.READ_PHONE_STATE N/A N/A
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A
Allows an application to read the user's calendar data. android.permission.READ_CALENDAR N/A N/A
Allows an application to write the user's calendar data. android.permission.WRITE_CALENDAR N/A N/A
Allows an application to record audio. android.permission.RECORD_AUDIO N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-15 03:53

Reported

2024-06-15 03:56

Platform

android-x86-arm-20240611.1-en

Max time kernel

158s

Max time network

166s

Command Line

com.feelingtouch.gnz.realistic

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.feelingtouch.gnz.realistic

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ads.feelingtouch.com udp
US 35.162.253.195:8080 ads.feelingtouch.com tcp
US 1.1.1.1:53 85255de3b5c98f328c0a-82a9cb82f409b93a553598b3332bc451.r53.cf2.rackcdn.com udp
GB 88.221.134.227:80 85255de3b5c98f328c0a-82a9cb82f409b93a553598b3332bc451.r53.cf2.rackcdn.com tcp
US 1.1.1.1:53 inmobisdk-a.akamaihd.net udp
GB 2.19.117.38:443 inmobisdk-a.akamaihd.net tcp
US 1.1.1.1:53 d.appsdt.com udp
US 1.1.1.1:53 0ea7ce13b225e1a851c4-9a7e5b58dad95e5f97593bff7fb2b987.r87.cf2.rackcdn.com udp
GB 88.221.134.218:80 0ea7ce13b225e1a851c4-9a7e5b58dad95e5f97593bff7fb2b987.r87.cf2.rackcdn.com tcp
US 1.1.1.1:53 ed7fe2ba0cc187d7c98b-169473d44f105caf2f8fd4e5f56d8008.r40.cf2.rackcdn.com udp
GB 88.221.134.194:80 ed7fe2ba0cc187d7c98b-169473d44f105caf2f8fd4e5f56d8008.r40.cf2.rackcdn.com tcp
GB 216.58.204.78:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 inmobisdk-a.akamaihd.net udp
GB 2.19.117.34:443 inmobisdk-a.akamaihd.net tcp

Files

/storage/emulated/0/.gameAd/com.feelingtouch.zf3d_LANDSCAPE.jpg

MD5 7c9b8726e2028a3e5bf0494db1d6d0bd
SHA1 c357d02aa55f78b0c458f45e39fc9b2791a6337b
SHA256 809e5efd83df13416a5a7223d8c09eab126b1d37f9b73a7f6ad9ae0c1ee1de4e
SHA512 9342b01c3c567324cc9565bf0da781173e5040256609271023dd2c43f339567d0d04ce27d351418856a1a1df30d53b8bf1a4d98305b4312ec560b2107b9d2d61

/data/data/com.feelingtouch.gnz.realistic/databases/countly-journal

MD5 0e8e39606b7e70ea6b8c36ca5ae275c6
SHA1 7b645726959468f17584793bce55f99bc4c93a8c
SHA256 c182cc3f3fbf404ca2cb9d98032dddaa213f1293347d358821dcd14f5efbcd9e
SHA512 a57ed911943c32da84526d8c69ad83dde97ed156e27973ff030875419de9dcd4dce6a653d607d20fe0b166eae78436880de722ece1b904763d9ee0092b35492c

/data/data/com.feelingtouch.gnz.realistic/databases/countly

MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

/data/data/com.feelingtouch.gnz.realistic/databases/countly-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/com.feelingtouch.gnz.realistic/databases/countly-wal

MD5 43d800605fe6f6ca45632c0028e088df
SHA1 ea11b7d57f9d744f52eb09d2ffac081396934a81
SHA256 8af9b03be2847654f3792280f31941e429912c84f8e981426ca735c6808741c1
SHA512 e3ddfedfb4bbc0ce978ba5bccb881f243535f78b506e38cf39eeba8898823cdbe2e1da0bd6aaa5b19fc42ab4a84259fdcccff878c1a8b29f8042b1012fa3c654

/data/data/com.feelingtouch.gnz.realistic/databases/vungle-journal

MD5 8fbe3273616c38a7bfa3c46866fda1f8
SHA1 ac458119fa2717c3ae69896054ed3db0443caf1b
SHA256 53749558ce432594ab51f4762b7322d602576d0acbc497ea853a78c69e691a86
SHA512 7d432c6d4a9e2844fe3841218afaff549bb09bd68008ad9a7cb79324a32af83a1c8416bfbf4f4bf32ecc476e66d384bad7226e777d2f92446167cf05888d0a1a

/data/data/com.feelingtouch.gnz.realistic/databases/vungle-wal

MD5 619c532832f91fb9e9e3c6235109f8ea
SHA1 e47d42f620dc55f9b85e0ff3ac2d1f2f3e120ee5
SHA256 7d74f0377abc7c162c2e9b9f86ee1fce36d783fbb508038d9b2909a64199322f
SHA512 2e1bb2e986f5abafe319242c3f4d919707499ffd7ee2d884ec9d39a8c5d8e92d70f015b8631e486de430ca3ad53acfca42838bc58e02a7f8923e60639aa5e2b5

/data/data/com.feelingtouch.gnz.realistic/cache/inmobi.cache

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/data/com.feelingtouch.gnz.realistic/app_data/eventlog

MD5 f9cee186e7a754ecc9a9d6d580f406ac
SHA1 c01e922b2244539e4378119bcd1244df5f3711e4
SHA256 937fda3faa50b13932746787c41a1f6a5b34951badf82d6e00f3889d41084940
SHA512 c09ac5727efb1d70d44dc5a8a4aa580dc5cf9e6a3777b14df4c44fdc20dc1bc4e86117cd81b60d173bcb75c7485dad180a785f4b538b1d85b586845871b4ccf1

/data/data/com.feelingtouch.gnz.realistic/app_data/eventlog

MD5 de589cc95c65e07b4b7cb263bdc3a0d5
SHA1 c7dad549904aa960a441e5d1dd404d7c2bece846
SHA256 890b07da5fa6904bcf3ab871a53a41db745aa112d722832cb2e4414ff7e1fe2c
SHA512 1d04ed192bafaef72ddc6b10b610f54964fb04cfffc4a9e83a8b44ba4d0f4767cf5cfb3b8e5c3e9ef2feb85af6cab6cd8b9d0d51016bfebb411b1c52a84bd994

/data/data/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal

MD5 9ac6fc2499c038ed4081d06d65754b0f
SHA1 701bec6f297c8f2838aa32ae0e23060c08bade43
SHA256 c659239404d2cb2e98c8fa5090fc842b927981efad989c422b6dee4e8e1314b0
SHA512 d0ef5ccd9da1ac935fceec1142d06320780559fbd81fca23c032e58f720ab86f3fc77c0ebddbccc3ff7b91569e24094066bac73223d74f579af3ac9c0d001dd2

/data/data/com.feelingtouch.gnz.realistic/databases/ltvp.db

MD5 1a5a1107f50852a18c5f8bc48a76bee2
SHA1 329954a2b8847b92d9613e625c0835dcfa546189
SHA256 110779476cfe7e01c48943a4cdb69f3489228c0d2b9665e8b6268e27eb8a2984
SHA512 c4f9364bc39978b787a78d94a28d5656c62067f67329ebff45159ddef9bb85521b8bce2c9411a920ef7e9f26c5d00622bcd04485d7b6fa87e758c3826028e480

/data/data/com.feelingtouch.gnz.realistic/databases/ltvp.db-wal

MD5 c8c38a55ac6be0e2bbbba531ab9bcd4b
SHA1 b9003bdc52424c965e20ca47ee7d3d50732a48be
SHA256 9d2dfe9beb7c69535a092aea9ee93343525c93ea950334e90883e78e4749e613
SHA512 cf67b43cf2e7e57fb91d63c467092716c83170c331e682728583ee1dd57de6f67cb9af5ef187a4e97a22fea91f7962e4b828458b873dda7c219ea897204853b9

/data/data/com.feelingtouch.gnz.realistic/databases/im.db-journal

MD5 a6892d03bf7381119444ee1492a60624
SHA1 9493a8f86621b8bb09395e9cd116de21b69aa428
SHA256 8b85458d08b1d41e0945cc6d1e30dbf05ced624b17e880fd50bc5e91856e83cd
SHA512 b37a0ab032118e0ba747805c21283d5b97b49f709973d657883a8a9b9fa15458d2c7d47181b4c3ea744731fe5b1c513c3c852f3e683095d78e38b7109bbaf1e6

/data/data/com.feelingtouch.gnz.realistic/databases/im.db

MD5 446bcead19385f21fa4d50b4009f3500
SHA1 08c2973c98014faab74dbde0aacf8814139a8976
SHA256 60baa7f0b33e8055faf74e02761daa797763e42a35606f9049be15e46543fe2e
SHA512 2ec2403926e3b862eede11756f675ce722b44e0a14e395942e7c80247217795bda677d96f121f7356fc55ffd5bcd23144b222638542d0c35c3a9a549504ac57b

/data/data/com.feelingtouch.gnz.realistic/databases/im.db-wal

MD5 cdca5453b2970471ccf792dfe3e3f825
SHA1 5ca02a911e2277e870e5b6ab7e0c6525393ba123
SHA256 84747bba0f7f2ea8f6d29ac0ad055df81fa8e0512f60544608409be977bf8e41
SHA512 9b53dd731bb7ae37dd3a1916634e514c62f3bfadefd0cb42d55fb34cfab20ecfd47616eee7ed6386147024e75132d0ddefe843a1376fa9c5002c5e3947ebc039

/data/data/com.feelingtouch.gnz.realistic/cache/inmobi.cache.data.events.number.network

MD5 cfcd208495d565ef66e7dff9f98764da
SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

/data/data/com.feelingtouch.gnz.realistic/cache/inmobi.cache.data.events.timestamp.network

MD5 8527dd788105e1a3bb3a4e541bda0bac
SHA1 e40641a2eb9012a740a9d8ce4072fc58efdc24ef
SHA256 7da76d0a884189a0c2ef19f2dba89898b2eb0a9eb88f8c8e8311968295ed45e3
SHA512 c002c463b3f8ce6caa0beae0fafc289f04b8fcc9a1ea91df587cf4e63dae32e66f863c763a5882686dcd05ff8f7045eab1bbb626aef5868e9f2a0066acb2a735

/storage/emulated/0/.gameAd/icon/com.feelingtouch.zf3d.png

MD5 11d1d09d5ac7df654da6370c926f465b
SHA1 7774d0a7bd818b8233d60d01ae6fba34d9d006fb
SHA256 1a20613afb04e419b1e80489a67df0ce2140e482b3405e8eb7606c3ee5a432af
SHA512 87553d42a0c9baecc2a2a5ea417bb7d29383ff59c17e2dd442f39a9ad3ca3a2eaf36f14acbc3c6cf3461db7502119c1fd34af9d83b0115b677774cc21b5588d8

/storage/emulated/0/.gameAd/icon/com.feelingtouch.empirewar.png

MD5 e49c0dba932ca6626bd0832fa8ddfc7f
SHA1 9aa717a4ebc0811401791122c8d05a6ff43cc77b
SHA256 3bad0da48acbec9ec7b72d16bd3c099c0c339bd94762fb0e2f892c4471bf71d7
SHA512 d4a28fea07f3dfa15fb7bf587cb27b6e352f720f1a26d3ce13427bc56a049f899c7a64c6796b948d1fde3ec8980f98c715c3155cb7d4432ebd225f482ae19e61

/storage/emulated/0/.gameAd/icon/banner_ad_ew_en.jpg

MD5 d369fe6614f1de745536560e16ae1761
SHA1 4e034c3caee28601ad804f72d0f84dfecd0e7618
SHA256 94b17cdd0513f9989e7789d2bf4475deed1ed734ff42b43f15a391c3c3b449b0
SHA512 e5ef1183463c8b0d7588aee1c74de94cd4f0d5ca965052440f13f2f160ee09f56146d13bf5506d0a74c3ea47bbe8e4acc0412b32b45e66dd7c39d36665ce0b3d

Analysis: behavioral2

Detonation Overview

Submitted

2024-06-15 03:53

Reported

2024-06-15 03:56

Platform

android-x64-arm64-20240611.1-en

Max time kernel

179s

Max time network

188s

Command Line

com.feelingtouch.gnz.realistic

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/app/Superuser.apk N/A N/A
N/A /system/bin/su N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)

banker discovery

Requests cell location

collection discovery evasion
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getCellLocation N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries information about the current Wi-Fi connection

discovery
Description Indicator Process Target
Framework service call android.net.wifi.IWifiManager.getConnectionInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Listens for changes in the sensor environment (might be used to detect emulation)

evasion
Description Indicator Process Target
Framework API call android.hardware.SensorManager.registerListener N/A N/A

Uses Crypto APIs (Might try to encrypt user data)

impact
Description Indicator Process Target
Framework API call javax.crypto.Cipher.doFinal N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

com.feelingtouch.gnz.realistic

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.178.10:443 tcp
GB 142.250.178.10:443 tcp
US 1.1.1.1:53 ads.feelingtouch.com udp
US 35.162.253.195:8080 ads.feelingtouch.com tcp
US 1.1.1.1:53 85255de3b5c98f328c0a-82a9cb82f409b93a553598b3332bc451.r53.cf2.rackcdn.com udp
GB 88.221.134.179:80 85255de3b5c98f328c0a-82a9cb82f409b93a553598b3332bc451.r53.cf2.rackcdn.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 inmobisdk-a.akamaihd.net udp
GB 2.19.117.38:443 inmobisdk-a.akamaihd.net tcp
US 1.1.1.1:53 d.appsdt.com udp
US 1.1.1.1:53 0ea7ce13b225e1a851c4-9a7e5b58dad95e5f97593bff7fb2b987.r87.cf2.rackcdn.com udp
GB 88.221.134.218:80 0ea7ce13b225e1a851c4-9a7e5b58dad95e5f97593bff7fb2b987.r87.cf2.rackcdn.com tcp
US 35.162.253.195:8080 ads.feelingtouch.com tcp
US 1.1.1.1:53 h.online-metrix.net udp
NL 91.235.132.130:443 h.online-metrix.net tcp
US 1.1.1.1:53 ws.tapjoyads.com udp
GB 18.244.155.28:443 ws.tapjoyads.com tcp
US 1.1.1.1:53 ed7fe2ba0cc187d7c98b-169473d44f105caf2f8fd4e5f56d8008.r40.cf2.rackcdn.com udp
GB 88.221.134.194:80 ed7fe2ba0cc187d7c98b-169473d44f105caf2f8fd4e5f56d8008.r40.cf2.rackcdn.com tcp
GB 18.244.155.28:443 ws.tapjoyads.com tcp
US 1.1.1.1:53 s3.amazonaws.com udp
US 52.217.236.96:443 s3.amazonaws.com tcp
US 1.1.1.1:53 e.apsalar.com udp
US 52.217.236.96:443 s3.amazonaws.com tcp
GB 2.19.117.36:80 e.apsalar.com tcp
US 1.1.1.1:53 countly.feelingtouch.com udp
US 34.219.1.181:80 countly.feelingtouch.com tcp
US 1.1.1.1:53 graph.facebook.com udp
GB 157.240.221.18:443 graph.facebook.com tcp
GB 18.244.155.28:443 ws.tapjoyads.com tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 connect.tapjoy.com udp
US 54.197.47.7:443 connect.tapjoy.com tcp
US 1.1.1.1:53 a.applovin.com udp
US 34.117.147.68:80 a.applovin.com tcp
US 34.117.147.68:80 a.applovin.com tcp
US 1.1.1.1:53 live.chartboost.com udp
US 1.1.1.1:53 service.sponsorpay.com udp
US 34.107.157.36:443 live.chartboost.com tcp
US 35.186.238.108:443 service.sponsorpay.com tcp
US 1.1.1.1:53 content.offerwall.unity3d.com udp
GB 18.165.227.93:443 content.offerwall.unity3d.com tcp
GB 18.165.227.93:443 content.offerwall.unity3d.com tcp
US 1.1.1.1:53 api.sponsorpay.com udp
GB 18.165.227.93:443 content.offerwall.unity3d.com tcp
GB 18.165.227.93:443 content.offerwall.unity3d.com tcp
GB 18.165.227.93:443 content.offerwall.unity3d.com tcp
US 1.1.1.1:53 api.bee7.com udp
US 35.186.238.108:443 api.sponsorpay.com tcp
US 1.1.1.1:53 img.applovin.com udp
US 34.160.119.165:80 img.applovin.com tcp
US 1.1.1.1:53 assets.applovin.com udp
US 34.120.175.182:80 assets.applovin.com tcp
US 1.1.1.1:53 res1.applovin.com udp
US 34.149.87.163:80 res1.applovin.com tcp
US 1.1.1.1:53 api.vungle.com udp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 1.1.1.1:53 d.applovin.com udp
US 3.233.87.30:80 api.vungle.com tcp
US 34.110.179.88:80 d.applovin.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
GB 157.240.221.18:443 graph.facebook.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
GB 216.58.201.100:443 tcp
US 3.233.87.30:80 api.vungle.com tcp
GB 216.58.201.100:443 tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 1.1.1.1:53 sdkm.w.inmobi.com udp
US 172.212.5.164:443 sdkm.w.inmobi.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 1.1.1.1:53 e-ltvp.inmobi.com udp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 34.219.1.181:80 countly.feelingtouch.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 1.1.1.1:53 inmobisdk-a.akamaihd.net udp
GB 104.86.111.145:443 inmobisdk-a.akamaihd.net tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 3.233.87.30:80 api.vungle.com tcp
US 1.1.1.1:53 api.vungle.com udp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 44.206.139.183:80 api.vungle.com tcp
US 1.1.1.1:53 api.vungle.com udp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 34.219.1.181:80 countly.feelingtouch.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 18.204.140.70:80 api.vungle.com tcp
US 1.1.1.1:53 api.vungle.com udp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp
US 3.229.216.59:80 api.vungle.com tcp

Files

/storage/emulated/0/.gameAd/com.feelingtouch.zf3d_LANDSCAPE.jpg

MD5 7c9b8726e2028a3e5bf0494db1d6d0bd
SHA1 c357d02aa55f78b0c458f45e39fc9b2791a6337b
SHA256 809e5efd83df13416a5a7223d8c09eab126b1d37f9b73a7f6ad9ae0c1ee1de4e
SHA512 9342b01c3c567324cc9565bf0da781173e5040256609271023dd2c43f339567d0d04ce27d351418856a1a1df30d53b8bf1a4d98305b4312ec560b2107b9d2d61

/data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal

MD5 b16dd2b494e92c9eed14c49266a05b05
SHA1 a94103358abf0da9455108cca728823196ae4508
SHA256 43366be8b826e5f5c0c0d3003cb8027351365d6b51d0319b8f6026618235e182
SHA512 9c6750da61934eefb4601beb9d6da13bcbf4b98416e045efa0d9e27cccd15025c461891f79e6f751cf5b224964fdf24d43be16933abd30815be426784f94dd78

/data/user/0/com.feelingtouch.gnz.realistic/databases/countly

MD5 aa6c4c68f0e3a03ef423acc12a496e48
SHA1 411350944935f0a2e8d334335e7e2a9e258ed5bf
SHA256 777b32f79854adfa20c9c4fc6e6076f4f1c022acd863ed18fbb709911dd72f7d
SHA512 d649b08e5af8fb918d254c4c6505cd5f54b4c4e2d659204b64d21f3c141f53b6e668f3a23365d8b926cda04cbb5af7c34ed941d79bfa02d502d481130ef9800c

/data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal

MD5 b223446a58332fd53d6bd6126df40c7d
SHA1 40f92a1e936dea3e436adb9aa119545014168081
SHA256 b42fb4423f619c9099348b3693f59c949f5d830eea3e025fbb767f484a9e8e03
SHA512 cbd9803ad56d49c110e11b979836d6b95d6879ef29dbc22f4a5d3133acaa4b4aff7d7db8fc369125bd59bd0410325409337dc2dde322266d855462073562372f

/data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal

MD5 b9f51551f7552e4702b2a92ec244a115
SHA1 8f129185c50476bf8163d464d249faa5e719a2be
SHA256 51ca2e806a8ecfdc5a1674b5c8e0a216c40a478eb079ed078f64d1ba17484ee8
SHA512 0694ff72100eeb64d80b5870b3272d03c442db58a3f3db6562e028978fea75f672a90538263dde225fa964637d6d27980668a06ba115ddf0dea6b290e1e8ac62

/data/user/0/com.feelingtouch.gnz.realistic/databases/vungle-journal

MD5 c7936b1a1a649236726f6acf48d630dd
SHA1 b0bae07ff19800d1b70e5f1839705b0115663fb1
SHA256 78bbcdfadf8171dbcf81a61110dd9692aa9d8b8befdebb396cdd71ef833fedb2
SHA512 7046abbb6b954647f6d8aae6481cf686653f2739045e2349d50a694d7cb4dcc8e8e1033282abddbc7fe908ef27b5300bc68210066d4f03c6121676732e8b7610

/data/user/0/com.feelingtouch.gnz.realistic/databases/vungle

MD5 64346aa5a550a310ca7c6e31d0d73469
SHA1 0c910062d9c1b8183beee516396bb67fdc39b67d
SHA256 1af107ad26b8b415ce41a67bbf18f511f411180ea59adbc03ce37dcc9ad727f4
SHA512 2dfa3d671a51fe4c2e6f035bd842e7cb3b381078963ef183f2c9a1acbe752e525997d735e12e61d570492a87647bafb13be0a58d78059e2c66dbc04e7a0b486b

/data/user/0/com.feelingtouch.gnz.realistic/databases/vungle-journal

MD5 5fb0d33d0edad60d309576dbe9093e4d
SHA1 d6ddf2519e4f8169e2e99dafc95a0e89e98bfea1
SHA256 ced76973300bf6bd04ed97553a5f02d76599ca214a43e2a4810a6ebb4a69ed46
SHA512 ebc70668d45a917517088968c4e1cc8d3c1b557a4f6d67d3e50e258ec71f741da5f9bc7a4ddbdd293b2c7ab7eea398040a162c05bbe39cb6165297a4ab5216ed

/data/user/0/com.feelingtouch.gnz.realistic/databases/vungle-journal

MD5 acad477ebb895ecf512aa2d0cd98ef00
SHA1 e728f3b46207cb861a8fbbebb8dc807fbd128cba
SHA256 2f826af008624798497721eb98ec3911555e10151ddd829eb9ed48e76add14c1
SHA512 6fac6af60d74b39ffb5c98137ebe37066a6ba7413192418fffe2d3d3c7fb6683691e29eacd5292f10701cdcd1dcc45e176c311ff09a1f556f7d8c458368099b2

/data/user/0/com.feelingtouch.gnz.realistic/cache/inmobi.cache

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/user/0/com.feelingtouch.gnz.realistic/app_data/eventlog

MD5 f9cee186e7a754ecc9a9d6d580f406ac
SHA1 c01e922b2244539e4378119bcd1244df5f3711e4
SHA256 937fda3faa50b13932746787c41a1f6a5b34951badf82d6e00f3889d41084940
SHA512 c09ac5727efb1d70d44dc5a8a4aa580dc5cf9e6a3777b14df4c44fdc20dc1bc4e86117cd81b60d173bcb75c7485dad180a785f4b538b1d85b586845871b4ccf1

/data/user/0/com.feelingtouch.gnz.realistic/app_data/eventlog

MD5 de589cc95c65e07b4b7cb263bdc3a0d5
SHA1 c7dad549904aa960a441e5d1dd404d7c2bece846
SHA256 890b07da5fa6904bcf3ab871a53a41db745aa112d722832cb2e4414ff7e1fe2c
SHA512 1d04ed192bafaef72ddc6b10b610f54964fb04cfffc4a9e83a8b44ba4d0f4767cf5cfb3b8e5c3e9ef2feb85af6cab6cd8b9d0d51016bfebb411b1c52a84bd994

/data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal

MD5 8c34595ff6eced20554fb7f2a9cd1c6c
SHA1 1d0865788fd9a6910a32d6f5d5080b9ecf91600d
SHA256 ea38588d31047504f976737474d5e0508a8adc1fd4e2a9f09fa0609f5cb8a5f6
SHA512 d6757e721c7952c8137171c1ae25f90a45977649fe7b93cfde660599e98e0335ff396ed0cf307aff9bd85459ed9de266282c4da18b7d4993d28de99bebdb1012

/data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db

MD5 a486976c07f1867a7783ccfdf5073697
SHA1 e99abef1032986bddb36f26558e601e4f5750ca5
SHA256 e18fc88dda801012cb10639405990ff69c24aac028d9d9b86179cf4727c3f485
SHA512 1fa5635b1fd5ecabae9cc654a9637384f501dbb69dd77cf793cdc4ea7d68d5ffb2bfe55aa012bd4f667dceb7af6f6c171411bd59f31b6730a11f32b856593ab4

/data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal

MD5 46ee4568955a2b577eba78bda82db90f
SHA1 9726b3fba16fc41171cd9ddd2c35722ad17de65b
SHA256 66f6693b84cd27d72a678539b16c7a8fac2061b34f040de8942ff4c93c1717e9
SHA512 18045d609bd659b6c6c7a82e2f2ef29f5ab48debe4bcd418934a5dd08720e7a57a804ce2aed4ed94da7141d9b14d49f039d26f3133f6346f2471cd2281a6d8e8

/data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal

MD5 b16cc01a6c572fbdfafb3e17558ae44e
SHA1 15432c35d96259dee2c01eaddb79f2ac37c80de5
SHA256 579302391bbf7e770d277bfcac7f6c864e40f13fd9ecc6f4ef7d551dc7cab1e0
SHA512 dc2c5c43628bcf88b3dafa0e3db5e8c7ba455b55e50b4839d857f0bfad0976263026116601691d44b3e88563795f1d07a04727cd644a52b5cbae04b9be1c79d0

/data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal

MD5 71a4c74ff3b93191470c94e50a82ac71
SHA1 09fe657adb0e93cc9b508eb9b0060becd70241f6
SHA256 62e5eedfc7b56692bf4aa2623d3be73dd8cdc09b9247598262d98e7d684286ea
SHA512 b78d3f163c2e721bebe837ce4b363c1f628440a9cf1994e680e827c4fef387b13725ca7d70d6d9bd9e6e85948433ca873cc2aada347f8684816d888b6c3cf332

/data/user/0/com.feelingtouch.gnz.realistic/databases/im.db-journal

MD5 3c14667f08c4f0b72edfcf5573e37831
SHA1 226358b62064c65f446c6e61de0400eac7d290ed
SHA256 df88a570e59eeee7823b66ec7b90d55d6399ee04459925b48a2545400042e66c
SHA512 a1c42a1cf52278ddfcd2289fe1fe8045dc41c0e841f42b0e58fb743599c49603a480cfec95e6021241f748f1491e7acbebc9aa19493ffdd26ff78eec748a2888

/data/user/0/com.feelingtouch.gnz.realistic/databases/im.db

MD5 51bb486fd3c97746e742e6ace5d1d6c1
SHA1 458db8f97667392ff2aea446758ff37018fb4e8f
SHA256 32f3998d18579c5e019d2d26fbbbbd1bba3cc20c3cfabe3221a9b5bdd73d3638
SHA512 829c638d843c3fd8f61241a680ffbe913d87df72a0a1fdc19ad778e8a67dc832badd730e4f47d922a69f5e5b8a61580a71a91097ad7ec72a435626491551e7cc

/data/user/0/com.feelingtouch.gnz.realistic/databases/im.db-journal

MD5 fa1783eb7b1fb76587503faf19ceb4f0
SHA1 7ad282cefd6aae09a0ca7fff8f5c9bc12604a56f
SHA256 d12a8a1535461549dd08c69b1846ff39b14c7b725f4160b02a90bd71fc1e07b4
SHA512 f4cb40a583441e4a3942ea06221080128d91ab8d6a8068c88cea7fdc7cf0022bc157ba7b35334e2dc3f8ec2b4f57048ccf148de52de71251c8354b971b526bba

/data/user/0/com.feelingtouch.gnz.realistic/databases/im.db-journal

MD5 01e193d99ca298d45e641329e38c03ea
SHA1 2c3438be577d35a5406baa676911883cb7aff54e
SHA256 0bc575a13314285bfbd4f85a57ad8f36a046f276304da935c2338295eb161d94
SHA512 d4aeaa706fe142aa1cbb97299c87a5fa22e13d4b68c7da39e4aaada48ee200d69f5e2861ff1ead7218949de3354021265f1564d865362bacefb317bf2ec51fa4

/data/user/0/com.feelingtouch.gnz.realistic/cache/inmobi.cache.data.events.number.network

MD5 cfcd208495d565ef66e7dff9f98764da
SHA1 b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA256 5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA512 31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99

/data/user/0/com.feelingtouch.gnz.realistic/cache/inmobi.cache.data.events.timestamp.network

MD5 ed1c7198d6ef94950245b44468337f9d
SHA1 17c091a3318edfcfcbc0c7ee8f29adcd04e5379d
SHA256 4a1abcf01859c10dbbbd4001d9d27bb6040027abd7ef3f1c0ae290174cd39949
SHA512 93bed2477dbb563ad413b8b44feaa353db9936df8ff97e858d17ffc5312860656a14ed4f12df95d477018779519b5bba01182b5c7d41bc341797f6d393fbf1ab

/storage/emulated/0/.gameAd/icon/com.feelingtouch.zf3d.png

MD5 3da6f40f896b20f24a822b54e58240ff
SHA1 9a83d1f9afd2ebafb71d19f765a437090dc64c62
SHA256 897d091c5c145323e3269093e94c93e4c51f67264b112041f482d522a823c81e
SHA512 98ffe7100a953f54d04353d8fd432542146227716a064701e31632745a36c7424841d84133b808a1002d3c188df7c6fca0fb8a432432529d5bcb82c257148158

/storage/emulated/0/.gameAd/icon/com.feelingtouch.empirewar.png

MD5 ad99b6eb4ce6ff8cd581b8a57652406a
SHA1 f79fed773182e175ac40a7772a38f7e730582e8c
SHA256 cc0c2ef416154deabe1df8a73577f8e57f87197ef4309b4f6b82f33307e5e58a
SHA512 d5bcc55323b3a765605061d8914a9d6897d27a1747caea82ebcc60488d19cd744cde6d3a6aaab18615f66ce45b80bfc7ef0cbb4c1d607d54f5981ad14ebb5a6b

/data/user/0/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal

MD5 21f75311dad274c15e8d130f418c74de
SHA1 5c64cdba9bfe53299055919fbfb2215c166bad40
SHA256 7c2add56a37c0f3eb223ddad959611f0374a97124dcdf78b4af3b0d277fcf295
SHA512 fd2b163493a81deae90bad987372ff67a47f3665dd28bd5053b846c8249267b54cbf50567864cbaf2ba9939989aabf6692e6fe2e2c90be77d3497ebf42f366f1

/data/user/0/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568

MD5 f2008aa2e70cd412b6b983a6933fc932
SHA1 3680001ed8ca51af4f1100b1c077af0dd4541f9b
SHA256 39850c79b8950a0549d0157329f9549f3e04b60fc747dd3e90212edb27b5a71f
SHA512 51c9e69a4bb56ef66390662338f782d9a7da2cf0196337d1a86166d56c5b4a5bf520c5dad968e77f755b8be0639f2e2935d95aef18a379b7fae2f4fd4971bbf9

/data/user/0/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal

MD5 d6c431246382693f3a14fc930a47e259
SHA1 0198766ca3b70b59c37bb3a6b6db879a1f5f8df6
SHA256 e320fbc3639e4cfabd56102ddd255237f4b595a17f3a72be891362282e480d34
SHA512 e5f50f1cc27bb5e989007ca09ac61171904d277ede755701c01f51a74c1c91a35c929b1d86a38dadbf86ea5ecb37c27df01331e425f786c484c72f5e14ad50c3

/data/user/0/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal

MD5 33fd6cfc7fcd73c8f403ae5ffe364db1
SHA1 7a455cee79ebd247828b52a379a33904c637f61e
SHA256 0e19aebecd2ef38e4fc3eda9c99c25c5fdf6913f0052c7427c5810b65834c6f8
SHA512 2ba36b635117044ed01c757a125dad79386e77376341e9f76f6ab6e7bd4f33fa4ae6424a1d92b74d434fa0bf877fb16da3a6cc078dda85f978eafce26f01fb9a

/data/user/0/com.feelingtouch.gnz.realistic/databases/Apsalar.sqlite_0b4fffac8aaa6d3a2175b70bf0e65e96c4f80568-journal

MD5 e3feedb2b35d613da5feddca09575592
SHA1 50940631832b1add56920237a1f6de045352f0b4
SHA256 acf4d14ae16d4605da401efa21f9a13a5267083aa8b77a2a449b764c028a4abb
SHA512 e4ecadafa2c7f3328b6e1637417217b5574dad770d4c7be7847d15d32127a9877cc7193a2dc3114e9bc550ee9a0adc42845e63a56060cef7459c5d7957b28ebd

/storage/emulated/0/.gameAd/icon/banner_ad_ew_en.jpg

MD5 a1d367e6b35e9cc2aa8a047ded5bb916
SHA1 1099eba0e4f588b02bb6f83b07fc8f5891f0e2a8
SHA256 4e42c09176ee94eb91eb97e9942539b72e006152f9e6aa2ba97f39c176382781
SHA512 882c91c4211dd753e77c176714e1c798a6216d7f7d369b5bc650d34b3e021f694a611d965dbf43b1f73fa0c19e7a7aa903cc8cd8322d7a51b6b3cbc823f0ed22

/data/user/0/com.feelingtouch.gnz.realistic/cache/__chartboost/CBSessionDirectory/cb_previous_session_info

MD5 81c5b43cfffaeb5047cfcd4b06b0d14e
SHA1 8415ceb308e3fcfb8a7d93ac5717481a9f5da148
SHA256 d7261793097a281bce659d5cc2c8c96fe9409c246b389aac834046caeeb5dca0
SHA512 882480d75150b12949413b9af74bd847e2f36a73c2dcbe880a0e319d25ae4bd2a3420b1774d3bca96797c372e009d0f99a80863af6ab7d6e7f32b0639d100853

/data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal

MD5 20cb404f48efe3b31f505accb5ef5c91
SHA1 4a245765c8e3938e1a90d99d1c7c186827dbdb0c
SHA256 e4a457dc128845ee1b378e0244d39f73f278bea4555ab1ae24b6e0f5895a3ea0
SHA512 5254de2ae7a39e429eb9b03a185221e13d493bf43b2e952de2ba45710e482104114a6eeca48c5f2bb913b7d18b80c533986bcb1f3da00bb6884d7c98b2572c71

/data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal

MD5 be3c382fa81623a66745507256b0c1c8
SHA1 8a0994c9524573989cacd41062e653b6c5f8dfd9
SHA256 63d8600eed473d3258dae2f56a3e7a50ed32c8b92d743b64a33f0d2554e07f41
SHA512 4454bcbaa647e94937b592950ce6bb382eb896722e6f5ef650c415d355df4d46294f984cf33333a5d0a0b49ada58602e55a9901e34ecf159ab9dfb8d1a974d0d

/data/user/0/com.feelingtouch.gnz.realistic/databases/publisher.db-journal

MD5 87306ff19d4331fef79d2d86809b0b77
SHA1 2fdaf790ed21d8a24da9432b319570811b6d1329
SHA256 7fc9c602467a80817c2704c524be8d18535749fb09a9fc358b015b2d90b8a745
SHA512 f1413d39ac86126ce809788af17bb16dfd9bece8e409a54ff91098afc787387e6fe71c2ccca0c408cc32fb6cfc2e3556d0213b52c9910b7a38ea91e697fa3756

/data/user/0/com.feelingtouch.gnz.realistic/databases/publisher.db

MD5 c1c2cdd3a33d74a78e90edd75cbb84ee
SHA1 7acd42fb578bd72f54c85f263f39ae6e7de679f0
SHA256 8e23335f178da3af80cefc74372aa9786bf989f13b9022d9664ecc08ee7a5c94
SHA512 d9f24cd388aaac97f9a0f8a88e9f094867b93c9455a93e34e26744c7c59ca9af98ccff9b775dcdbbbfe3b699f2a71ded322327d130c39f3cc38d459e0a1ac54e

/data/user/0/com.feelingtouch.gnz.realistic/databases/publisher.db-journal

MD5 9bd370285f912d5b3db3520072ea1a59
SHA1 254ed8389e7e644443b2129575aedd8503f0c4f0
SHA256 69353d5d1a035a1d7503ae5ee8a5e082e86ff0da1374e1cc820897511fffe06e
SHA512 14bc91f7744dace468488a8421b121252abf899d93c482280ddf2e918a7ad9969de45392641b422ff39b0e688a88dadf2f574da3535bb4ab1ae172485d37a611

/data/user/0/com.feelingtouch.gnz.realistic/databases/publisher.db-journal

MD5 2d8d5423069117cda08c8923ef517ba8
SHA1 899a24d28a39079009fc2081f8bae917d72a520a
SHA256 ae5a9bd936194726466dde36766ed00a9efb303d1fc2738a5fcdd2846ca562fe
SHA512 cdd6d713926b60cdcd0825c853ba930789ffb8033dcfe77f1ccde0376ccd90bc754594243fb8bb17d2da5a426d9d7fa48ff0d00f496c3e09f8d1301c40e727e0

/data/user/0/com.feelingtouch.gnz.realistic/cache/__chartboost/CBRequestManager/87523452013

MD5 c4c0d7895b12524b6a7500b8164398dc
SHA1 ec338fc68918542e05d6f5c9308571714b2948f7
SHA256 277f6819eeb98722e778c441c9d90ab9712a3549761d2bcb06507be437d607ca
SHA512 2955c580f8bc87d8a2f912d5938e48687348dac85a3b1993bce90f2e2e54623036753b9930f33d468103152ecdaef87a28acb29aac6a79f85f021405dbdb5f44

/data/user/0/com.feelingtouch.gnz.realistic/files/Tapjoy/Cache/305e92b552f0b149f572e401c5e9b4fb1d1c5bbf57888f31b39e47b04b42e92b

MD5 5de4c723cd74e72aab3768c822b59f6e
SHA1 6bcf0e7641be9d5f6a9a360239ea17180c5c24c4
SHA256 634117884ad6e001da18755836bfb8a3ab8140a00d8e8e8a5ff401fb8fe31a4d
SHA512 f3d074e6fba27f33522f58efbdcc07ab5b01ef3c7f86ad62ed4fb15a25441e8b915f9a5160713c01ed4fba74dafbaf0523f2a172a54e5fd8e8008f3799b426cf

/data/user/0/com.feelingtouch.gnz.realistic/files/Tapjoy/Cache/72cc2ce4c849a74a571306657b38154530fc013c5619d2756cb44006b71281df

MD5 cebd2eac9e5d22dde187020b1456ba55
SHA1 080d9bf7be8dcd1d0be2db35b9f377313e2ca64b
SHA256 d65370d78e962ec8db098b0209f1de275bc20df21e4889a5ace5c818968c4091
SHA512 3b90a1944af8cbd4f15b2f2c8963e69e3353b47a0ad1205ca79bbf630efd2a66f9e1fd66a3a862bbedc997af3ed29cfd9dde4eb6d2056aa074e24854542a9432

/data/user/0/com.feelingtouch.gnz.realistic/files/Tapjoy/Cache/fe34bfffbcd29b1755f133c19aaf4621aef426e082ee6ff530f12b91de36a0bf

MD5 ef998efc9d10eef6fcd3d5dd8149c84c
SHA1 1c5089ba85c24230fea9b646e7c860354f71a03d
SHA256 a84b4119c5ae21da53194e5dea2ee3f9bb12e51da81dcf8f1823305603262ee4
SHA512 d3c937fc1aa8490d5348a73efaab7d28f1af4e20b3e43189364344efbf6abc2e2d6ed6dd03116d014ce94346265e6c293e01545bf246d57d8ea477aac47ec3e4

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/1381250003_28x28.png (deleted)

MD5 759a106983ec92f34344dc5064efd29d
SHA1 2c237ecc3297a144ed9eed2c4e0ce68d5bffa07b
SHA256 1b5b3be1232ba117e19d81f6d0a2d6d1d14ee6cf726fa2a2800e19166736ec81
SHA512 516b0053563a00690e503780c883d51b84143498305e2cc7bbee4489e1a06d38a2c637eb3c125b7d5e1def35e31a66434f403c2a7d9634e87c8b87f05a94bb49

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/spinner4.gif (deleted)

MD5 2fbc75a0bc67e70efcd02f9ca5ad178a
SHA1 e2410a028e70becf3c94c8b5c313feb53b125a5a
SHA256 7fb6ec21540ed959f2ba7842c6b95903267d612009748ca43692112582a70187
SHA512 2f3979093bb0fc2c5e2929bceedb223457edca5ffccdcafa909007003d9a74813d10f08ba58b818bc81f5c796c74c5c9dac3d165cd6603296a45cc8fccd0f704

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/od39fea0_d5af46dfce4703c6fcb0843e61456a0504f84a28_v21_phone.jpg (deleted)

MD5 f59bd413684db8ae54278f06e516d5fc
SHA1 60dedf45a602671b9b6bb31833dc7d777703d35c
SHA256 9abbead0166db07e253cb6015dd49df4efe2afe34b42ba4270b96d3421e8148c
SHA512 fd4eaae331f6932c8d5f469c85dc08a469212b83e7cc6fa57402be0d72d5a7ad0f67336c541c8484ec60bec65cfe57054334dbcb02d5e4a196c5543e2d768e81

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/od39fea0_7abf9270b69e6e2639919fc6a0cd1e563ba923c3_v21_phone.jpg (deleted)

MD5 16b6ece075343ff146c9504bd73ee0e2
SHA1 7557fe516c8545523d2ca1bf56017b4497a77c16
SHA256 40b1e78a14d5902ef2b76c2ecf05aae49578999f3280afc8c7ac49fe85185d68
SHA512 795a0261a729cdf55bf29176a20c6a6634450187a448c401ef2565c95ca67e43d12a389258983140c1e8282c1308f4b1b54e45053791521cba5cb134c03ec842

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/alvideo0amp4 (deleted)

MD5 4a1ba803c37a96184eaacd9e3b0707a8
SHA1 fee96ca9c99b45a5613524fa1fbd2368158fa65c
SHA256 34bb868fd88e9a2860a8338f6bd3338e96a6190831b1ef0d982b475a063a3eec
SHA512 cd058da13ea815c28ccd4c7030ef6649e21335e2619cfb509bb5d93a166d206f051ee09cc5b41ef3370e95cdc4e715c3b7da986fd5649c5c00144e9e49a9a6cc

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o66b33c6_c50e8b9addf4ffc7adb409d65b81db37281f1fa0_v21_phone.png (deleted)

MD5 569546214f143f2b51c888743e3450bd
SHA1 cd763124ea3f6af3f6000cf735792206b4db4298
SHA256 8872195f909b1f7a656bec84aabbc74aa93431c3dc44fd2a7c3ec107443fafe2
SHA512 94dbe8fc36d55e6aa51739b6884c4e0f283ab36f4867ed72ceafde96fee582226ff571fd7abaef58ca097d3fc3133d14a54beceed9783a99b61f60070d474adc

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o66b33c6_09bb70ac78bc56d354c15fe18f465faa201d2749_v21_phone.png (deleted)

MD5 52017a0892c4170424908bac608873a6
SHA1 09bb70ac78bc56d354c15fe18f465faa201d2749
SHA256 0d6807cda2b7b305d0aca0c4fc278a1abc6c53652e12e0712002bc281330bd89
SHA512 d7f3327521d577cab2b76695b4fd3c5acdfe436ef1785df8026329ad2b1ad55c03bc0d5632578d15a479d45fbfdf420ea199051fae40c0b73ff05125d13529ba

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/alvideo2amp4 (deleted)

MD5 1be5775484b2f6676ceffd32018a99cf
SHA1 42de7f37dbc45772c8f47299f7277913cb494c02
SHA256 4ba1dbb1b9b39db409594e8aacd6ad03cca19b75f1703648418ff3bc43274dbc
SHA512 3df083af8392f9380cbbd2b448cd1f79bae4afe9d58b13a0958bd03ab0012140667f29f3d5c98b607a6a54eafa308f30f339c287ca1167383266f136b944f959

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o8570f5d_76e4df552abea94498ec1c2d1b930ae4a179efc8_raw11.gif (deleted)

MD5 c64c6daa7744730fd645f822078062b0
SHA1 76e4df552abea94498ec1c2d1b930ae4a179efc8
SHA256 837b0f777ef831011f4133610e47935fe05c5af1b9c1b0a23a7210498a1cfbea
SHA512 b1e4718d220ccc86bd1e7ae14b2312853233573460c86f9e1b380145c0f0e7bdc503f18a44f0504b427420a8301155b6655886b502f2a557b59ed1945b007971

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/o8570f5d_cf0d74a144f3261c6755581910c8c73f4d217c2f_raw11.gif (deleted)

MD5 6abaa6685bc581407cfe4e7580746c3b
SHA1 cf0d74a144f3261c6755581910c8c73f4d217c2f
SHA256 8908732b127238a3ed7180af4d74d5e02028d03f7b6f90c3575c0016f213700a
SHA512 7a09cad7433f6d3aae9f748b778128aeec32bc9ea6b0c778f4fb839fcedc49ada97130b6eb68c5b130c1f4d61009c2371142acbdbbd36099d6073bdd1df52bb9

/storage/emulated/0/Android/data/com.feelingtouch.gnz.realistic/files/al/alvideo3amp4 (deleted)

MD5 192b055a9f0389f30770f0c929a7f212
SHA1 42a0fea07190df76b18b3dc953d474b5370900c1
SHA256 f69157c06ab30b8262034a08435689840853ae7ba3b70605cd5b6b04565a5a8f
SHA512 7b3066de3e5a2f2c2fe9669b74afaa3674fe51562efc086cec3a619ea913ea943f482fd3066255ec311a7c3ba871412e6b9f1ca8e45b77ebb3b57035e218a34b

/data/user/0/com.feelingtouch.gnz.realistic/files/AppEventsLogger.persistedsessioninfo

MD5 330627269e27d31428f9ed633d5154e8
SHA1 60bdb74f7917523767531add37e3c3fdb6c0c7f8
SHA256 3be89d80867a55ea3156fd21776f81c6141ab79e7b1e58932a2e1eb342f2df27
SHA512 ea8e831212bd0229ae8df5e267ec09ad767164cf06fe6521b337f4d3527f7658ddc46b53eba09c42af6af2aa9556ce19814896cc3b832d69c513fd7f68e7ca70

/data/user/0/com.feelingtouch.gnz.realistic/databases/countly-journal

MD5 f4d16a2e5e910a55b92604d496e9c56b
SHA1 e87389209454a42d146694da3307a59872076882
SHA256 470b9eed26ab98b3767cb5a2734e82ba7e5c8cb1669387ef3b35e35dab86a855
SHA512 f10b6ef6ccd37f6dad4d9846742f442c6a863b50da6b3a1f703d70569a8af48b31a83255a8217c9f4096dcb1c72afea267edbf9f14e81d6ae95408497a58810e

/data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db-journal

MD5 5729d1d82bac3bb0b009e944a896ce42
SHA1 4b0fb770adf5895e7f42b798ede560b7a26abae9
SHA256 bb5f201fde9b3bd814380f4cce33673c85d1f6e13d38120705ca217e5641c65a
SHA512 6fdc17dc93db4f9048ec82c9cf030e4f077c175bdad36d20491ad86043925904650f0f332a134f62949e04784bb6a36cbcd420c52d1305bc12712bbc8e4ba6d4

/data/user/0/com.feelingtouch.gnz.realistic/databases/ltvp.db

MD5 f0c24a34a80c1730f30bb32c6253bf4f
SHA1 c082d5d8a72c646b44e83d8dc30f031b9a6beb32
SHA256 9002e08266a4223e651aba613572d0fcc23f9c7ef5bf4c1cfc7377e229d97754
SHA512 9c680e1e028b99afe77514fb67f331b1a975bc2d9e5ed2f989749eaf6e3d6ab0c8b80ffc25a07e27468130904b898ca1e808fdecd6d51e859768aff15d949f3a