9ca1f601e4a014349e56f6cd07f44d0ecf2d0d2bbdf75841257714161b61c581

Analysis

max time kernel
36s
max time network
134s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
21-07-2024 11:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9ca1f601e4a014349e56f6cd07f44d0ecf2d0d2bbdf75841257714161b61c581.apk
Size

4.9MB
MD5

1bd1d28f5db0da9772b6d132f896c74e
SHA1

3356eb73ee99cd4133e19254ff337c1acc668f9a
SHA256

9ca1f601e4a014349e56f6cd07f44d0ecf2d0d2bbdf75841257714161b61c581
SHA512

ccf8daf3e427f512963222f51f49d66d1d0952a5eddaa6aa2d976bb3217c4f2ca4478e3915c09cb45531f23badee18e16da74c2c1f179ba163cd9a0416d60cb9
SSDEEP

98304:UM8tDYRpYWx+qjcdciLBWThdotdyd6v1FNoLp84hOPFOB:b8tERpQqNxT3o3lv1iOPFs

Score

8^/10

collection credential_access discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

evasion

System Information Discovery

T1426

Processes:

mob.play.rflx

ioc	Process
/data/local/xbin/su	mob.play.rflx
/system/sd/xbin/su	mob.play.rflx
/data/local/bin/su	mob.play.rflx
/sbin/su	mob.play.rflx
/system/bin/su	mob.play.rflx
/system/bin/failsafe/su	mob.play.rflx
/system/app/Superuser.apk	mob.play.rflx
/system/xbin/su	mob.play.rflx
/data/local/su	mob.play.rflx

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

Processes:

mob.play.rflx

ioc	Process
/dev/socket/qemud	mob.play.rflx
/dev/qemu_pipe	mob.play.rflx

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	mob.play.rflx

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	mob.play.rflx

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	mob.play.rflx

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	mob.play.rflx

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	mob.play.rflx

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

mob.play.rflx

description	ioc	Process
File opened for read	/proc/cpuinfo	mob.play.rflx

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

mob.play.rflx

description	ioc	Process
File opened for read	/proc/meminfo	mob.play.rflx

mob.play.rflx
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu pipes.
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4505

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/mob.play.rflx/cache/image_cache/359aacf6c9d9cbab0b4b03ce832213f2a8b1c781830a1019c4610c542358a002.0.tmp

Filesize
830B

MD5
160169bdcca731208d8d95d954b23f05

SHA1
2ba88ae3f8b06417f8a0407e7fa9a2d98bb06afa

SHA256
2aa0e44da5be5ccbe9d77b7ac6bfe621136beee7764836969b215de79c070c09

SHA512
42d5ec2b05b9ae041705d40481093bb40a1da39cba1a9807498b4383c4aa9127d60973eeabfd6d38d3964b6e820b75e156bba13e94a0763d3e4344eb36777051

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/359aacf6c9d9cbab0b4b03ce832213f2a8b1c781830a1019c4610c542358a002.1.tmp

Filesize
5.3MB

MD5
c555f9e232c6f4e00a788bec76e043fa

SHA1
5743a8254a1c91cc9fc63bc06f13f1dd9c00bff8

SHA256
dfdcc5d2ccb57c3a3bac51c45dd5c8bee96e3d8707cdfd7e3a4e3a1a001f97e2

SHA512
a6d8a1865649eaffb756cc5f2ead5764dc806311b16c93ec5df593942b6f8d14d57efbfa88de60fb754a37bb44f61cd9469f4f8d9deb4ce143093fccfe46ea95

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/3f5d82e357ce5154d866277c15436beb0428c8e2b2134dd11aab5537228965df.0.tmp

Filesize
829B

MD5
948ae1e9a2a77ed697965f7688fcee0b

SHA1
1862340cab48d95fbb82f5a1e4038f8be6c6bdf3

SHA256
f8373476d207e69017cfe71a02feb4aa7a9226e6550fef6c04280c1e09a23bdd

SHA512
7f12993b6caf8a09f9dd36826aaf94f02d34ccd119e5a3144bacc796a0d78106e3d49303e7a89788e63127a3eaef2a6c1df2d4316979b5cff7b943f1170bf59c

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/3f5d82e357ce5154d866277c15436beb0428c8e2b2134dd11aab5537228965df.1.tmp

Filesize
747KB

MD5
cea398c99abfa88a40add415e8a2c4e2

SHA1
94e25931d9e331c1eec75e0f3a64b3d11b289755

SHA256
19102e3d77208cf3a950b1aa0e18be9170e8032d66752967aca725513ae4b50f

SHA512
22775aa438b106b1edb61dd96850658b9261862259a5d3b633d4f0e265429b2e6142ea7f84994b68d6c9823f1f17b9ef44a5b5e2c75975f62e98818bbd0a40ee

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/5c12cba194e2aedc6a00e2404f3d77d0666c7728883f50b9de3f031955c87252.0.tmp

Filesize
828B

MD5
4a5078669db4ffcea399ecb16fbc6d06

SHA1
9bb1e73585792da525327fbaf7ca3ca5008cb785

SHA256
67052c52b6c49408e45b9e74c5a14773e18e18b0a8b8ee1315f786188ae861bd

SHA512
228726603de34133fe117fc8de085fed16f0f343098c6556b90693b96db2eb72a55526b6587dde4785e4c8b7b3ab72734f05ae08e1240a04f30075631c5b3ed3

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/5c12cba194e2aedc6a00e2404f3d77d0666c7728883f50b9de3f031955c87252.1.tmp

Filesize
251KB

MD5
fad86a9b3e42bf67c347dad5f70aa01b

SHA1
c5a0a91928b166b9c87fa5daee383ff8f4c0e944

SHA256
365fd0b1a2ae7d2502b490d6533fbec35a35e36ba425d8a1100b21f4ec00bc3a

SHA512
0f84a6b6479f31fa40d0ae37095c0368f067db8394397539671c3f18a427e0128d9ca276c89d27d1cce74dfed1f22ccd13837c3631a3c64ee1455ca55cbbbcd9

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/e0fbf7ac4472ca64af20c6f102c611403c9b08355707cd5db8f280b52258553f.0.tmp

Filesize
829B

MD5
e47651443e721e88e5563d95268817c6

SHA1
42a8efc5840a3e64fa728accc6df2d8baf4b279c

SHA256
31f8400813daf7a1417b0051175fce85c45374f39d617db471845a12d0059443

SHA512
273ba36260a0010980d9babe33223c58c1f7301823da15aad916ce0a0d498bb2c469357eae25a1f99ea758d1b4d423beb0b27af503ab81b5abd867f7c554cd37

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/e0fbf7ac4472ca64af20c6f102c611403c9b08355707cd5db8f280b52258553f.1.tmp

Filesize
226KB

MD5
e65b29219c49797c1f0f835ea7aaea7e

SHA1
3650329d166e321ad50ddd22320455edd6f92755

SHA256
00c3ad5706fbdf841c77a65e86ecb06eb4b98ccb7a3e7db12a0879f84da1dc94

SHA512
6b5f5f730bb01c630cf8497794670a6d7a4af2884acb1fc2447d44f927a530a58832197501bf1067dd555237e708f1a86c4441f843de4f3e8a300ce98eed5a32

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/e2a9598a39ac08e28d54c24bc3799cc80f16b5a77d770923d34db37c65b44d1d.0.tmp

Filesize
830B

MD5
f7db9bbc0daf4cd60586b7b636b4826a

SHA1
852ca001c653b6645cd8ea8b5d2d53405ea2130e

SHA256
7f3306fc3a9493c32fbd302e20485e48f9bd8f64eef269cbcb4b921311362fc9

SHA512
02610f8b17839dddc964e8b1b23020be80c90036faa165e2ccdc3df4817584fd5c1b1cc4e6c3526627ea466ee038f2bc80352bae1e119c024e4300392ee41c4b

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/e2a9598a39ac08e28d54c24bc3799cc80f16b5a77d770923d34db37c65b44d1d.1.tmp

Filesize
1.1MB

MD5
923e5fa4edc591f8bca9b8623563ec27

SHA1
3289b2781b5c1c82997ec9cb35f07660635a2da0

SHA256
3533e93bbad8a405eb09d22ae6a180f1b16daf1ac5d828d8ff916e16bb825e30

SHA512
cc58edc0a283f863093b3d8722033da6ede4de559f607e286ade7aa8590d5263104cc7fe319a2e0beba37155f9a8ede9d8aeab0395861bcd5c00c5fd36d1bdb3

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/e7ee3df443c65fd62d3df57e88fad45b63617fd79f4807326628c8bd0e3a5a26.0.tmp

Filesize
988B

MD5
e3e9dc677ab6f7e71e3c40f2bf1acba8

SHA1
966c05c5921fd186c7986fbf28bdb726edfe71d4

SHA256
923b7ee1fe62709a7e3d017915407f200272b420614496cb4f13d87150f859e9

SHA512
3fee3d8be23520151891bc74753f4a4a85115a7cd2a1b85a303e9d2e8cc311ea175adead246ffeebe2396ae6d311a2bf8984f4967dce4c118d05fd8c13d8d546

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/e7ee3df443c65fd62d3df57e88fad45b63617fd79f4807326628c8bd0e3a5a26.1.tmp

Filesize
542KB

MD5
f396bc80ab4e2fcbdfbde20228caeddf

SHA1
d7c8877dba9f1b5f0f7d1917231bf47b640d66a5

SHA256
3d9630f0a992a76b855d713461eef38e6c0b125ec22cb3b342fdcec36505ba2f

SHA512
5ba6e148defb30e5b099c025164d5ff0bbc4d2a947b78f8fb1838a910fb2f45f73817ffca073758f7a2ac400782a175d826c90df675a04341849dd5908b28737

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/journal

Filesize
1KB

MD5
48f6f23b7f40acc12f6b0ec5a19d8470

SHA1
2d6f489b2530bcb3262790e76c262e80294790ae

SHA256
a819332935989616dac4d3c9dd31abb3174a9336fba841f6052211b2c3995342

SHA512
2d18809e3c62bab3da19a164032bb1d9c584ccc8b28e3b1368f5675be276d869af8d06ce63e6d4ab9d510760d76b5207cc8902650f6b9fe1b013acb8b2841462

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/journal.tmp

Filesize
31B

MD5
d6ac8c8db0504502d7f0e057a78c5ce3

SHA1
8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4

SHA256
8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a

SHA512
100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851

Filesize
16KB

MD5
f6ff49fc92bef3d942852ec3e67c170b

SHA1
0fd4cf176dc644eff726b9287bb27483274d2811

SHA256
a465648b6b8437989aa763ac7fef688c054de03410dda0043e5a083977f42b43

SHA512
e528e2f45a97bf15373d0d0ff62e14928598e41d82847baff0cd0f4b6cb98942fdec2cfa1e7b8117551cfdfda7797d728731fac44aeb30708f627e36a87f7956

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
512B

MD5
9b08e3c7abc22662e0fc73cb49ff554f

SHA1
bb76140155412e8a82eeb815d6ab74c34bcf8d80

SHA256
2c542585154ca1b241fd274eecd1e3bf56c16c8d33a4344ec2f1b3f58b859bfa

SHA512
66ebe23807dc55eb80a9504f2b726f18ced014e236763195e62e22483256965bfc42eaa3f3dfd6ce4ceeb6572e91efc4b6f1125761b3c2a1264452cf3b96bad6

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
b92180f8ad96c616fa389118e0d1b1e0

SHA1
5949c3204c396b6c6b578bc54c25d18a63fc080b

SHA256
99f085c0e46a89bda563c2cfcf08e772424ba496e4ece2fbae7e10c5a6622d62

SHA512
f0b7112a0085419b0357a4fe74b4e0fb27baaef1d881fe99714eed5debfa37734f67bfcc81bf546655547f6df7b41616ea15e3bbeae7c9db0caa9adb9b94e37a

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
a89dc0268b5313f0b7309ccb353fd461

SHA1
e68b0653ac115a825226b840cf254df9e9618cad

SHA256
4f64e715626a2f2e338ef85f82982aa4a32fe9fa898c38151484ab34411d3c65

SHA512
6b38edb4f52f61864148bba31a17945ca7b4c09e82a34ea54cdd5ca33d494fc9601b9a02fa228d87c68d8c9e14f795738dcd3d5552e9b510b5e51767a8a377ea

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
53da7406bf074785e40ce98936390733

SHA1
301365d759690344e826341e8a28a4ec297f718b

SHA256
fcec6d06a1b7032a849a6b53bc44aa34d482d52905a43b780110a113df46e527

SHA512
1ce493563730187b8ec6d8932487121ec47cef434043466555a1bb79ea7f23fbd6bbf2e04c7cea3bb44941ef67e0465c75e45c91d6bc847f61139fb0aba38331

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
7f8e1195d17f6d68f99c7fda3e4100ff

SHA1
2c4ebd1e061edaeaedf772b7c4b418f33d978865

SHA256
6251e57c3844d6bfac51491ee706ae67983b3f52d9a2176bda0355df4f920bf6

SHA512
5b2ac2da0351124d4b525bff312f2c53fba767f3b8f97304ae64f2c6a96fd38d54e2ca1b0256a607c5f5adb8869a43e2ec1acbd1dc1e1ebd07afc58b9db58c9a

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
0fb44b17ac5d6f61d7abb713f5e77682

SHA1
659e189626e4d47486a7d6af7eca025d42975aec

SHA256
15cdb3676b4f50a80e59b423d3fcfcd559f2b266061cc3d276bef462cedc7d3c

SHA512
64421751fbc49ee65074bdfd328bcbd60a38495bca9c4b8a408f3972a38f25a5b0c02fb02550eee7ac27f213d88f4ecc26c49f28d9bdd31e3194d91ef264039a

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
7b769a11a978289f773c925926c3ea7c

SHA1
ad3d722cc65a491d6ce392214b767487fd3829fd

SHA256
ec2fb6667343bea1ab5c0ad1019d2a0560f2884be7c9723132e35cd2066a9fdf

SHA512
cb0a7fc77a88379e3bccde58b49722928984f2be3d91c492058bed1077b5889dcacc31bcd3a58668a0e2111df466424f15e4af78aee415fe057e6c0c145db8fa

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
e1f4dadc177f08b7e82a6ec8b03b12a3

SHA1
e4a083052c29879c2af17a5d22d90350dc58e182

SHA256
73ff9cb829dd05de264ea945f5e62a2c11879a0514c8b73201e160ea18de2c04

SHA512
76cf1baca5e7367b3bdd7cbf3ec80cc1e5ca4e803853231efc447a1599e64862591abe7aa42d9ddb33a50d7735fc3f61655e45775423196120e174dc2d6291b1

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
24KB

MD5
160a21e4374782602f821812bfde85ca

SHA1
e6db0d98ba9006d5a4c02e5a117be00a0021b2f7

SHA256
9b23dcfb6100166834370524470a3b1427f7d9d0ff85d220da2b7644b0782c2d

SHA512
c838d28b6cd006878382b9510ccf2a457143e9a4eebb3a1460c71e6bf2f4a609f436dc29ed72915110b753fcd881c07003ad931f582fbbcea52e54e788789fc2

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
d4e736884fe742c59e450f3fd9a7e235

SHA1
5d531b1c73bb5bbbee40d7ba49fff215129255af

SHA256
189feb8557c6be08ba044147adc192b9f46b0937239b3933a9e3c44823e0355f

SHA512
ce5365ed0913ca808a3855fb4366d8974191ccc2b1eaf403bb52fd48b26c1e5402f09346d153c74c7277957c216ec9d75533458091d173c1996a2ad60f2182a5

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
16KB

MD5
564328e40a26eaadeeb8935e73761ab2

SHA1
7bda3fa7b6d5e914c947737269a55ac1a08d94c9

SHA256
818bca138e26ca75b3c74ebd9ad3ea2c2720cb2fd090a518c34194f66a171ba1

SHA512
7a4b7fb833882b5b4589e49e9f057c588373c913e8383517ada6a07f9777df9d335b39a48d4ac1f024631c0991b1bd74d6cf6c9ea87f0a7d6f79576e145de08b

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
20KB

MD5
42516f9fc4ab0b2d309ec3bec6157342

SHA1
936763d38816f63024a767ea852e506ffc97d338

SHA256
0f0c51090a2a2c7a3456505136bb04e990eb8fd33d944319af58d2fcdd67ad30

SHA512
79277cfe7e146dc24505cf97e840302a42081cdeaad39697f21b91160c88788cbb55e6c0f3fc0d3b649fd5a3d907a5962ce4db0fc422cc0badda030422b5e7be

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
bf68268cab271e9200feafa89492689e

SHA1
78506f0a3880f724222ee9f3ad310c9ca3d9a3c6

SHA256
2a7f9b4a7ff925c6d69a435e5514a56cf898830266d6fa08f9722b916ec7e8aa

SHA512
dd9aaef7ea94fa96897f5012eb66d59a005ecfcec32960ce84f12d618ee74bf2a6c8bfc278b06908a1f0295319bfcbe510575f98e7bf5ff76915d241b8c6333a

Download Submit
/data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF6CE00200001119982FB3E50CC1B/report

Filesize
783B

MD5
fb95381cb4c644075c48a30e88923f1d

SHA1
5aed6ab25f6f532208080ecf66257221434ad296

SHA256
0ac10fb31116e13ea55c4228b0dfafcdc6190be4f810e796f79e77349e0b2161

SHA512
59682e9e58c09c4d578c8ea67655dd4a49682d562453d0945be919093b09581504ab05c75644123c469a292551b048743b306be99a7aa2a6fe5e2752274b9acd

Download Submit
/data/user/0/mob.play.rflx/files/PersistedInstallation4233099980930762263tmp

Filesize
569B

MD5
db35569f7a578a888018253400be7c76

SHA1
f2f230fd02fe4c6f671364d6dc3ec07307b96d67

SHA256
29f913648ee0b32f12bbb39abceef1f3f809a5107ec5765dbbfe1aa15d88aa0d

SHA512
2ee52c918708408e8c1a6b5679c9ba9f3e8da61cad8ba76c63396c2367effb2d5568d79a375d77aa0062d5b1a7dc9c6320bbcd3378e413a218d2cf176bf24fcf

Download Submit
/data/user/0/mob.play.rflx/files/PersistedInstallation4819159836688108724tmp

Filesize
90B

MD5
cc875e70fe90cdce25d1c7fcb67fd916

SHA1
f0f68c2c07363f9b1a75249e56bd82097cbc3e09

SHA256
60e1b3111f585916bcb3d9c4dd80eb3fbce9bdd399e55894d49e96166e2083ea

SHA512
e27ce35df5585dd6993252c96cbb5f8e7f15126c43a5700319603f6806068b080638119c5cd6caf7415abd78f951fa5dbdecb2a7706f94866f32448313c9948b

Download Submit
/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
57B

MD5
716fe77611fb62ec65eab284411f54a2

SHA1
fca14f702ec7e752b692062b448f3215dc5f2e67

SHA256
d4d3166b757e242043b9f2efdd30f19a4abfa4d0407d52a809069b3cfc5a7aac

SHA512
4e5f416cbd1857e9b47771b7f2bdb9b8ca944f03497aa0aba5843869b496371ddbdd368434cb8fa163bfc675d34c5307ebc5fd28780ad840de8aac1864d97b63

Download Submit
/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
541B

MD5
a8c3b5db9eefa7e80c4f3f0b6f6ff923

SHA1
6077d95714c0062be55a377e82d3189feef6bf7c

SHA256
4c83c7bf6b1640272ffd7590ccd72e57aa8ea7049d4a99e626c410163244a1df

SHA512
0ce238a36990ffbcfe880bb635cc00f78270aa0ee49c6fc982e6ab7ab0f6ceccc2ab53ce59cef433e9dc2cc8fd9a4601569a4428a13c4240657075b0215c2a6b

Download Submit
/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
676B

MD5
5151400085185cb82ae8f8f535f20bb8

SHA1
3fdae348f7b14f31d975a7d80f3aa0073f044217

SHA256
97b03f4217c4e97c2b8202974eb930fb7b836a126e7d8948e09dad397db0fc38

SHA512
e8d6a6f62c0a2832508899054ec73556d4624f9f5d9b1e4c0a4b6216b4c6f7f56cd78c9423a49ddae6f21bbbba1498673dc7cd3e601e2b6fad7bb85ecf3968ae

Download Submit
/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
937B

MD5
e25ac5562f3ca04e65608f61cbecc2d7

SHA1
d2473368dfd7ee66baeb2c348f1a18fc126f9e5e

SHA256
dc9b19bfbc9ac10b69268d441c2faf1bc6c5aa89520abf94911a7e1423cd40f7

SHA512
c6becbdd3282df24e91fb4fbf4879add05223b0a0de15d7788ec0f23aeb9584d3befdbfbfde7739299430f8a9590de71f03648822327b9e926c8ba9fcd3359c9

Download Submit
/data/user/0/mob.play.rflx/files/UnityAdsStorage-public-data.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/user/0/mob.play.rflx/files/shared_prefs_sdk_ad_prefs

Filesize
153B

MD5
65026ee778e1372d9f4aed742772e893

SHA1
5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc

SHA256
15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c

SHA512
589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

Download Submit
/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

Filesize
2.1MB

MD5
60613793d0bce882b80f2429f3b50edb

SHA1
48b22e5a190e572e9014a10c4a4543e57f2cb332

SHA256
92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54

SHA512
81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

Download Submit
/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)

Filesize
719B

MD5
d165470950d875a5ef05e52b16fa2b71

SHA1
8eea6374a2f17e04a9265785fa1c805c4c3468dd

SHA256
ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c

SHA512
41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db

Download Submit