Analysis

  • max time kernel
    118s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    21-07-2024 11:53

General

  • Target

    9ca1f601e4a014349e56f6cd07f44d0ecf2d0d2bbdf75841257714161b61c581.apk

  • Size

    4.9MB

  • MD5

    1bd1d28f5db0da9772b6d132f896c74e

  • SHA1

    3356eb73ee99cd4133e19254ff337c1acc668f9a

  • SHA256

    9ca1f601e4a014349e56f6cd07f44d0ecf2d0d2bbdf75841257714161b61c581

  • SHA512

    ccf8daf3e427f512963222f51f49d66d1d0952a5eddaa6aa2d976bb3217c4f2ca4478e3915c09cb45531f23badee18e16da74c2c1f179ba163cd9a0416d60cb9

  • SSDEEP

    98304:UM8tDYRpYWx+qjcdciLBWThdotdyd6v1FNoLp84hOPFOB:b8tERpQqNxT3o3lv1iOPFs

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • mob.play.rflx
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu pipes.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4962

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/mob.play.rflx/cache/image_cache/46367177e86410546bfa2a0315358b82614a85471f85818211f9f1dca04132a7.0.tmp

    Filesize

    516B

    MD5

    819ef5556931b3471b5d14235a0b0333

    SHA1

    b841dea61a4cb9ff599a63a35352d8a18098ced6

    SHA256

    e29d97915d03f4e61f0a0055947b7a49725150469433ddf350ad9a9c06aec549

    SHA512

    cc9a5e41ddb21d39712e8a99bea8a135ba64c6f958f1bef0b4e0a7f0d78d12225123b7a61de7ff2c9ec4cbbfc54ac12e5735482b38a35196a935b4797d8d279f

  • /data/data/mob.play.rflx/cache/image_cache/46367177e86410546bfa2a0315358b82614a85471f85818211f9f1dca04132a7.1.tmp

    Filesize

    1.1MB

    MD5

    2492864b8ca714702acb1c6258a0b194

    SHA1

    f6b13aa2d4a0fed83c3f353f788e3a00c699631e

    SHA256

    20e436f8cb0e0d42fe22047c554f7a74cd562a1cb30a43b8cfe06d7c8c03ba45

    SHA512

    fa1fefc6d774ddd7acb5d049e3cf32b8150f2ed51f0d21570093b2ec4195f8d0965cfb125787b1b8474228a8e0d148b7207d1b1fb951e3253ea72da259ab3682

  • /data/data/mob.play.rflx/cache/image_cache/4c5f26a015251d5a881d3088262050088265824ae755b2abf8a679d71bb2e1e0.0.tmp

    Filesize

    514B

    MD5

    7fd7d792b3403f23ab56eaa4a8befc03

    SHA1

    eeba30b623adf111366034b4d5d6517f4c7330e7

    SHA256

    2c388f9ec2eea5bc571d4532f01cc0afb25ca09f1aa633066cfa9f0bcfaf3e0d

    SHA512

    403f8a0c1963abf236ade5488e4a34caedb8758b4e523ee3d3214778e6b28c2d472c360d98f5acdf0a6ecab1e0de3aa1de1624c8008905513f68ada5c4c5b432

  • /data/data/mob.play.rflx/cache/image_cache/4c5f26a015251d5a881d3088262050088265824ae755b2abf8a679d71bb2e1e0.1.tmp

    Filesize

    156KB

    MD5

    204e4f34ef11e8289fc91919e0e52b7f

    SHA1

    e195e4e78e4a1f2097c63c85b4756f7935e02b7d

    SHA256

    46776e04fcc72873b69838170f25fc4dea9c33318de95a90d11eba6cbfa968ad

    SHA512

    bb56e00e6cc8485f0983aeba84996dfa81a1a3ab5b0938646a09a867404d99cb1140ba5da7890af833738e592f1c415f59d22bf9f6ee9afc0592c8df57fb0832

  • /data/data/mob.play.rflx/cache/image_cache/7d89fee0b6e82b012c340a3f5b8dfc898b9e1366c43d5868f5eb10bc345e2b8f.0.tmp

    Filesize

    692B

    MD5

    c2f2518a4350b7eb506be00ed249d3ff

    SHA1

    f3214075a2057ff91ed7a8e9111070f3721e25e9

    SHA256

    22b51ca0eecaa914a00629c62805bff88edfead4121a2ad77ff3abedf67ae663

    SHA512

    7fecc782b3fd21addd7b8fac896de7d4717de627737f5eb097493bcb35a87068ab7baf71e7a458f6bc4a39b84bb55e21c486ca7cc5af1dd07615e986f3b03241

  • /data/data/mob.play.rflx/cache/image_cache/7d89fee0b6e82b012c340a3f5b8dfc898b9e1366c43d5868f5eb10bc345e2b8f.1.tmp

    Filesize

    19KB

    MD5

    9a2f653e57ed9bef35e5ac0b020356f1

    SHA1

    9612df0bafb0b2be4348374fa1b4c5d333ce9b0e

    SHA256

    9935dcf9478f20a8d388b61de7357f507a442f843b582b955cc754c1d1952ca8

    SHA512

    e02ac64493fe47702f99820786ab39fe076d513e31ac25c3b48e64466ff2f90587a408ab3cf7b432ed7408bb66248f69287492459e25f9e6dffb96f504073f4b

  • /data/data/mob.play.rflx/cache/image_cache/89292c12a1a0ff8e977fd9ea493758c7813ab321ffaf8c4e8084651eec1e21cd.0.tmp

    Filesize

    515B

    MD5

    c1873beee04110eb74bc61a15209b913

    SHA1

    03e2a7535fbf0097b9a3c1c8980a64c3a14b4cec

    SHA256

    d9abefc3b0d08560533b5bf0027de927649c558e528f5c1c7b308b8f18d4de95

    SHA512

    483a690fda472dd004ce40b3579d513751b81db4b0e9aaa3ff23eb47fe05b78e1a6c1f865a44eaeb3a290714f56a0e7e135b36968f88aca57ce13981c5c3bd6f

  • /data/data/mob.play.rflx/cache/image_cache/89292c12a1a0ff8e977fd9ea493758c7813ab321ffaf8c4e8084651eec1e21cd.1.tmp

    Filesize

    168KB

    MD5

    e6ab1eac366f3eb792b1dbd4b0131c63

    SHA1

    2c28b2827cd5604db261c2731980eea697fecd28

    SHA256

    db2279e5c436fc5ca52f719dc51c3fb92f3d5f5c88af2e05dbc898f867a1fb25

    SHA512

    88876409fc405b70a43ae54a2b87198d835d0e4fdd5333d962e6cad29989c08970b89e89e68893cb26b9f3887cf58080fc2c1b162315efdceeb99437801df74c

  • /data/data/mob.play.rflx/cache/image_cache/8aa1e1cbfd7329fbfac10e9146ac221fb955169a2c0df6003d8ddf8c3ef48b66.0.tmp

    Filesize

    514B

    MD5

    ea521fd593a81fe6f4764228fce67ad4

    SHA1

    73c39feb94b263f63590d5eba3bd6f7b2cb67444

    SHA256

    40e5d6f74cd0acabc4e9bf4d934039066352ce99df93a85f0b3a537892acf28a

    SHA512

    226e7ad84948565823f08413df08b955fa03b0bb2922a8d4909c2373cbb64e79e479a71160ca7ce4d6f0b8423ad68c3462e9b9990140321a4f4524e6b9255a49

  • /data/data/mob.play.rflx/cache/image_cache/8aa1e1cbfd7329fbfac10e9146ac221fb955169a2c0df6003d8ddf8c3ef48b66.1.tmp

    Filesize

    59KB

    MD5

    c611eb0721e9f82ec391937424e325a5

    SHA1

    d6139e0eea24f6bb7a129f711acb049f14f815c3

    SHA256

    b8e9020cf8c864ae15d2164c7268494e8a2d3d174d2b75aa61721af04d434687

    SHA512

    09a47218b4f73008d44eb2292d9a0fc8dffe3bb6b795b854a86e094b4cb1145780589f754d92cca9f67dd0c7c2c7b07c833511f3853f2343875e73778b3361d4

  • /data/data/mob.play.rflx/cache/image_cache/e0fbf7ac4472ca64af20c6f102c611403c9b08355707cd5db8f280b52258553f.0.tmp

    Filesize

    515B

    MD5

    5c0c13d6e39ebc1ee9343c53f50b3111

    SHA1

    daee7a60d28f7509838c9a1fd41a629b1d29b1fa

    SHA256

    94628936551e91db2023e6c9da87cddff9ec308fb41e7a12f9f534945ce5e552

    SHA512

    2ae1167b9b42401035513d01e73237b31bce24cea6ecb005c74f8050dfa07d822c4ac554bfcb96bfea79764a82feacc64427a74ce82eaafbf47590c97a9d72ae

  • /data/data/mob.play.rflx/cache/image_cache/e0fbf7ac4472ca64af20c6f102c611403c9b08355707cd5db8f280b52258553f.1.tmp

    Filesize

    226KB

    MD5

    e65b29219c49797c1f0f835ea7aaea7e

    SHA1

    3650329d166e321ad50ddd22320455edd6f92755

    SHA256

    00c3ad5706fbdf841c77a65e86ecb06eb4b98ccb7a3e7db12a0879f84da1dc94

    SHA512

    6b5f5f730bb01c630cf8497794670a6d7a4af2884acb1fc2447d44f927a530a58832197501bf1067dd555237e708f1a86c4441f843de4f3e8a300ce98eed5a32

  • /data/data/mob.play.rflx/cache/image_cache/journal

    Filesize

    1KB

    MD5

    b97eb9176e365137a92218ff93880039

    SHA1

    07b0ccdd5022ebf970a5af0e06878e6f06d4d3af

    SHA256

    75c1709cd6be04bcb6b2d37a49f4721039b13aa87800a2402cd4cc4d9a8cb8e4

    SHA512

    dac37c18ed60577d9e8d9ce8dc666ecf9ebb724d59f37a353d405d28fe1a601b7c61239f1ae36bfc3c6f45952383fed655a352ba3b08d22fb164a712e33775ba

  • /data/data/mob.play.rflx/cache/image_cache/journal.tmp

    Filesize

    31B

    MD5

    d6ac8c8db0504502d7f0e057a78c5ce3

    SHA1

    8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4

    SHA256

    8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a

    SHA512

    100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

  • /data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851

    Filesize

    16KB

    MD5

    bfe3ce584168cac11d2c964bca6e534d

    SHA1

    68a05c2667427f3f69089a9194d5ead10c196bb7

    SHA256

    6a38aa9be05f1ce67a227bfe411e6a5455ccf58b61ab0cfb3fa1b8e0ae9afb66

    SHA512

    4d784dfef285a5bb75bc477afb82c94ea6ba6f4237fe23e3f9ab8b0052ef063ddb53948ccc440f4b31a7f51417abac2bcff8597d4e83aad1075968f5bc1e1705

  • /data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    512B

    MD5

    876861a761fa94f1b4190ff9532a91d7

    SHA1

    01b1ee0678ce77a1b37e51942fa7bd0439a03a80

    SHA256

    9ed876bb160175949fbbe977b6e9499b79ab3c85303580d4d0fd0c23430bce7b

    SHA512

    936ebe247d57c817b8700994668523a61f3ae74ffde4aace74a3a96a1761c5807c99ff30caaf1837d7c772d03c95b67c8a95832c720d9dd4133a59f0bff5bef1

  • /data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    b69950bce1b27a6cbacc77b7d7b68bfd

    SHA1

    0b0c20c3ad73f8563128ba7290e3705515b1c0f0

    SHA256

    377a00d3b0c0ce6c1c9d4c16a6f99ba62105db150f73c5d7da71cb000ce5a710

    SHA512

    987a56675d0e2242112a8faa178124b6390e7410438c7295e837c4adef0e71e2758be8cc0f2886ea5a9dc9d8192caa4f21c84453e8c0f2aa85621dc42a324e9d

  • /data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    fa7ecf3497f62dd4336d50052dbe3adc

    SHA1

    c2fb43d63fe4caa9ea6e9272565343a894b43009

    SHA256

    7ba8821fdeee31786ac2c382844d0a47d0dc177ebde7e03464e73f5367d95cc2

    SHA512

    4adeeeb55fbd7d2ec8f04a5a213c82ee7786d3e0f1c2101e2b91055592737604e6c550a3cefa095deac6238f03364f45706f970ee9221a99f7b0c727e5515b49

  • /data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    166eba3d4a8090ddd45b10e9007157c5

    SHA1

    53e676ac7e2a276718693880ae54242da2e907e0

    SHA256

    1d1640699dba3e71384cfd34f161dfa8a81b23c38513e77285d6545505a03812

    SHA512

    9e42a80ab0f31db79d17e5ef817851f63c6b9fd9234c9d2343850b1f8389f85de5d5839a1822dad3d2b093b914af2a0499d50113e9e64a3e61a9791f2cdd130b

  • /data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    2ad3207ca7a9c5aa9c2c4e3c2f7bb455

    SHA1

    3e7069d02e487092728e32bbe6323b8c8ee17c39

    SHA256

    7977905d8974d2905835d13b6ec9203ab373fba3b12a5a98a2b318cc48d2c316

    SHA512

    d67b9ed86726967eb1c8d0ed223ee311e81e1b69b700ef43cbc2a05c094ee4858bf2753bf6a4cab5f7d07d6fde0899d9e5e894e0a61e861888328ad2a6e36ba0

  • /data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    9f13d5210f72e56dc5bfa690a3af2621

    SHA1

    a20fed5159ae88bda40a430946cb0e40a78bc122

    SHA256

    6ac26f5e5f7ac152baa72821fc650aa79fd0d488097770458d434e8dc2badaa7

    SHA512

    d53260a01724f777f4ef586e05d15a4a60b17720d9ae90c478bdffe662f05c2f698f4d9df3acaba51127bf8b6f65bf707c73186913a1226323687f273cd9fafb

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    a4385844cb3e241cd88ac5d50662ff06

    SHA1

    95d39aed8619cce77bfef45502c38e92c9bc8103

    SHA256

    f59f82c614c61a581a416749b2b09d1d5436f4627fc1ca737e241ea4e767bb71

    SHA512

    58822eb8fd169ad58f86c8c26d096f1a8d86227c6809e7bf36a7d0549d83eaad228e9670c20f676908a7605904b9562bcd9919f671a670f3167b6219e5157d88

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    f1d8febbb45f7124e5fc2ea1909c6be1

    SHA1

    0299078d506198e4e4894b47b6d539449bebe550

    SHA256

    9f404f9975c26b8b4e5caa52f0fcd4cfe188dbdd7868ff822bc56ff117e71acc

    SHA512

    5b487ab3ca98f6bb2daea393dab2f427d86f9196e7ef6030422010ca6a45d44755d7e18dd60890ae59d395e51491d8ebe9d14d9209184b47d74bf1a37a2165c8

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    24KB

    MD5

    2f8cd75e60e3b338a208b2cb7004ad30

    SHA1

    12522063ae9df374a4065b9729b55d75f070216d

    SHA256

    b3998ec9671d8ee22971cf154aa8b19af2d2ae4f422735a8108271603d2285e3

    SHA512

    8a15634b62c7b89983f4b97e15deccd643358bbc0fd0d3fa7e94cc22c9152e5607c9d001c23b7e126cbdeaa336ac19de2beca61928f1b1182f3e34928b2a9bfc

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    81a40d7d9c7cf9bcb7d66688d1ceb162

    SHA1

    9f534db28642442758f671f9e92c7e292ec1e5f6

    SHA256

    688dbb72cbaae65399836c034b02eaba8b7df97d9af198432c7bb6289d046897

    SHA512

    cdc7d534a4e714fffed465f2b7e014b42e6e622ba4b74179befc90987b604485c229659b4333060dfeadcaa5a19f9ecda2fbfcac0ee6cd5853ef3b67e79a307f

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    16KB

    MD5

    d661c418992337712061e4338b2cc46c

    SHA1

    ef4392c5b11fe0154d26235ef5fb553779b4568e

    SHA256

    bfc6f50f5f970189af8c8819db3936baf54a4677c23e91bb5d42635886fa0140

    SHA512

    2ae6b5abe07f4e026fd09b6fa941b13ec5e0efc43ae40b5be3cc6ba4fea3a002f4f0cfdeb785cdfa491af12d91f164c405665be2af9ae41969eec803a2b5c61b

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    20KB

    MD5

    0caad8cee0efe16b25f50009a5d20b0e

    SHA1

    b44f7b6322f38a647c67838a873ed815ed31c7d2

    SHA256

    1ca8fd931bfb38e2a0422a2403483acf4a8dbe01b49c6a89007ae997ca2868be

    SHA512

    f32b269ccecb6bd9f3af80c4b020edbc9161017f5d8080730f5ecec6d8b11e838d61c5a4ff81ada1430396fd729968ee939f18fa28f0236ddec83ba393be7d66

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    36b24a2cf3af1947f6b7fea894a64d99

    SHA1

    ae7bb34d1acd33444fd980694b2f4d3df64c2819

    SHA256

    4a3c51e6149848acc5b921f5d2ad987da7d4a352ae7e06b6fe729afdb3ae88d1

    SHA512

    4e48ec180c520e2722a2fb576a345231ee05aae963a0565d69f9c4c53ba7e7bdbf75cb8e78adbc13328ebb67a93ba908f4b4e5a47e36936c4ddc00439d40e9a6

  • /data/data/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF6CC00C6000113623DD8348C984B/event0000000000_

    Filesize

    31KB

    MD5

    fce630e28ab07baa0df734d5a6480540

    SHA1

    24bd62387d830ce7490601e2d97628777e53a7ff

    SHA256

    0aaec2274d07a4618da6322a4b68b821e828b0576cd34484aa2afecd42025a27

    SHA512

    fbf5c183b5f5c5069bd60aee8518110d65779bed466408598fa180c3724e58b4aabedf65315133a68fca2665db83f580f2105610c8c9411954e9cbe2e490b181

  • /data/data/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF6CC00C6000113623DD8348C984B/report

    Filesize

    783B

    MD5

    acae5e96dd426826c2152304e6646a1c

    SHA1

    8fbfb8144d4814bd6d03df6128f4fc2c806334ba

    SHA256

    194676e8e1f1400d985aa8ab0231196de6c43100029c2779596ad0747e8dd563

    SHA512

    479005ed73637f716b7db80f001cfb01d6270a22cab3b9022630257a0c847e2df29462bb68a5bed5e9b43492908e0bb78940951a70ccff5fe03d27ebaad0480c

  • /data/data/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF73B03D4000213623DD8348C984B/report

    Filesize

    783B

    MD5

    5df87b22943e3c8bdcc97f8b8fe3ff6d

    SHA1

    ea915a587ce8b19bf40db51cd430cd35f3c38dda

    SHA256

    569abf7f6dc12808b1c1faed50ce49581e0f94e9f3cbf1bd47ac53ef353da6fb

    SHA512

    e59d9e6453baf09e245025417ae997a5652f89168146226b8cc2d0731dd7b8f208dcd6d021e65b10cde5e0e500a3e602b98357dcb2db021de85289ee683a956e

  • /data/data/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/priority-reports/669CF6CC00C6000113623DD8348C984B

    Filesize

    32KB

    MD5

    94f96891c861bb61381ad01158cc2b1b

    SHA1

    dfd8f0d085798bcdd4830dbaf67b7c4ae2d7b645

    SHA256

    1757d8450ff38f591745f08f90839936383dcabaa68b0bcd288b99f65515edd1

    SHA512

    bcd7b77981319588be99750287b44671889ab10b4f709f809c17683ad72e9d4a7be49ecdf311a4192b7023c66fa66f7a8591404ea2049f0cd2540f2a6d159e92

  • /data/data/mob.play.rflx/files/PersistedInstallation208888431781879765tmp

    Filesize

    90B

    MD5

    437f9b314eae48d579077c6ab3976d3d

    SHA1

    988118ba2712193dd4da4238193d79d77dfab902

    SHA256

    12c9b8f774eec00ffaa651ea54a8c1f9ca95eb6500285e85588abf29bc73e065

    SHA512

    48e459f274110f99001ae63ec2b0e43976d7bab58435b3bc77da021e6a33541a1fa91d7c213c3da5ed587465d846c3bf97e088dc5caa0562a10e0456e1cdd126

  • /data/data/mob.play.rflx/files/PersistedInstallation7244552896960204163tmp

    Filesize

    569B

    MD5

    7fa7b2bd835f580091911da66c5cfaea

    SHA1

    1ed5131a8ddc8043daadc9f3e821977c4d595fac

    SHA256

    d4331d5693e4e500b970f54fba48461d30db3362c258b0f5acfdbceea0730892

    SHA512

    ec976f36541fbc4cf862b202103edbe790e7c6d878b4a6f846d17ead9ea7c5f3e8ce4983204bfbb1a0bf582f61457d9940a87cec9b7407dada8a64ac83c630f8

  • /data/data/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    57B

    MD5

    a71ece8b252dab072ce3b13d3550818b

    SHA1

    d3cd4f6c8de23438b2c3408d3e128b5c0ab431e4

    SHA256

    400eb854650fb1826775927c593306ea4e992585d5be77a597e8d85f5a9053c2

    SHA512

    55d04abba5110addc97156757b2b2fb7495afded02c0da84e453af0fbb44b220e2accb179fddb5af06de99bfd7000022ca6ef54afdf613ffc1fdd326b248fde0

  • /data/data/mob.play.rflx/files/UnityAdsStorage-public-data.json

    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/data/mob.play.rflx/files/profileInstalled

    Filesize

    24B

    MD5

    1b49208050154951e87b7d783a80facf

    SHA1

    485ee0d6e70bf7ea560f22c196632d9c744a902f

    SHA256

    b49312bf057d4d2fc441238b2889919573fef0aa27bb66dc71662d9ace0e4c49

    SHA512

    eda71e7c2335d634c408e392d93092e1415308ccbf7f3b4a01d70bff9e924cccb5a71a4bd2e21adafc62c72b246a4cb154dad9c2a6d59586faff21f22ac73e29

  • /data/data/mob.play.rflx/files/shared_prefs_sdk_ad_prefs

    Filesize

    153B

    MD5

    65026ee778e1372d9f4aed742772e893

    SHA1

    5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc

    SHA256

    15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c

    SHA512

    589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json

    Filesize

    719B

    MD5

    d165470950d875a5ef05e52b16fa2b71

    SHA1

    8eea6374a2f17e04a9265785fa1c805c4c3468dd

    SHA256

    ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c

    SHA512

    41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db