Analysis

  • max time kernel
    307s
  • max time network
    326s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    21-07-2024 11:32

General

  • Target

    Eroflix_AF_10.9_MultiPatch_SpydogCustomMobile_UserUpload.Net.apk

  • Size

    6.5MB

  • MD5

    ac1b77d65246799e91fbbaf7c6a9cce9

  • SHA1

    c9b3c027566da411e66942af9a575893ffd41f5c

  • SHA256

    5f80dd7fccff6e15d5eda6e0e8263d9f985462155d23f335baaa0a44ea7f5712

  • SHA512

    f4a832849613f95b6cfceadceab792fd0022a7f925261ca950e963be41103d1bde93bb6c0298de7f13038b2c2f677c986a1637807bea1c27276292a02aba1089

  • SSDEEP

    98304:UUg7Gu5IfRSnPueFuaSMgg6MKRbV+pui2rmyOVLSFivt+OCvibZ+9Uy:ZeGIIteIcx6lbQpuiodMkiViZ

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • mob.play.rflx
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu pipes.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4614

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/misc/profiles/cur/0/mob.play.rflx/primary.prof

    Filesize

    2KB

    MD5

    8e1f9222fb599ad3bd0609c68c453e97

    SHA1

    c6f1b2b173917844eee1519f85572faca81bf2d1

    SHA256

    d632bf8f2047d9a3278120b2f35ad5960a78f62ab8bd8b8cc04832857be39bd3

    SHA512

    f7656a5f4e0eb97d920c65d5a402d6efe64278ef9d3eaec835830f65723b71ef13abcdf97fb07012d5ef4c4c00c56a6e266fadf42624f5aa8bffacd39bf8bead

  • /data/user/0/mob.play.rflx/cache/image_cache/060353d249cb44d713a88d3af6af246249eef68ce160b4d536cd573291642286.0.tmp

    Filesize

    693B

    MD5

    104f2f9880e25db8bbae740341010eb8

    SHA1

    7b46bca050fcc799a4cc46e774c02cbff775c48c

    SHA256

    8bd5cd0697fb1217af130c5f811bc4918707313cbf02071d32dc59fdd4231d2a

    SHA512

    981222c4a28bb898a9952237bf418de96ec52a4197bc737147e19d338d45a4e0800132ec1db21b9381ab7fe707bc66eb1e4624d702543fff85509a7865b22679

  • /data/user/0/mob.play.rflx/cache/image_cache/060353d249cb44d713a88d3af6af246249eef68ce160b4d536cd573291642286.1.tmp

    Filesize

    12KB

    MD5

    30725cedd364594dd6c61674066186ac

    SHA1

    57f23eb5a9e8d7c8e3de6659740b307edb51a4b6

    SHA256

    7fce9904398572669b2f754220c26882a45eb1e5bc6f239a544ace1968a2b35e

    SHA512

    e0bf28f026483cbf77347ffd1ffdebed7ee435e07a4c3186429e12d6aaac1ed9e069920593ebfa5d1e523874f3af3be82b9cda4c1b2acc042f69bd482ea08d3d

  • /data/user/0/mob.play.rflx/cache/image_cache/0b42a656f297ba720554483047fa553ec46f7a20a172e76c5f9d8664851cfff4.0.tmp

    Filesize

    515B

    MD5

    c21bfad4c97438a7abdd356e537b7f4d

    SHA1

    6e7cd1a17d4af4ce829a799e2c9719e10475ff31

    SHA256

    fd0b5a1291bc5fef4696693a8534bf5e588425e06c7719837ac9eb6959fe197a

    SHA512

    450baca24841033e076e2f11a6cb110e48afd2b250f7edede2468af70b1961d692d86bdb1110d8d31cf42b6b97c309a9a149ad41307ea8de79c6b6818eeaadd2

  • /data/user/0/mob.play.rflx/cache/image_cache/0b42a656f297ba720554483047fa553ec46f7a20a172e76c5f9d8664851cfff4.1.tmp

    Filesize

    764KB

    MD5

    a7ea5b62a2da63cc09ceb6fe7562f712

    SHA1

    423c97d6ff19bb25c8346b59cb236cffb4cbac9c

    SHA256

    92b5d60101e946b8a25af24db769a720a112b409981253995c870bbaea9e56a2

    SHA512

    882540272fbebe2ffea19c86ee23877c31a9ce5119def0f67e519e80a560a05bbf3dc65c9b8f66cc0d11ddc0d8a87b24c061c1f7b3aab7c15ad7a9a45ccf557b

  • /data/user/0/mob.play.rflx/cache/image_cache/5703b14a517e74fb94b96cdf54577420a86ebcabe229cac6fe4a872b1af5b41c.0.tmp

    Filesize

    515B

    MD5

    e69a155aa8d343368fe92b76777a9a64

    SHA1

    30cd827761bb170ffaf65edeaa6e92f74c8052b7

    SHA256

    5c4daff40a9958b9779d02dc85d3cfc35cfa8b77285c83d30b94103258558966

    SHA512

    51f98a94fd03bd1070ee0f2feba0b5941366dee88a66d27f258e9112dd6bab929b7a6037ec7909e2613ee7a9eed43f6675317ed4429cbeb3b179183710a664b4

  • /data/user/0/mob.play.rflx/cache/image_cache/5703b14a517e74fb94b96cdf54577420a86ebcabe229cac6fe4a872b1af5b41c.1.tmp

    Filesize

    124KB

    MD5

    e14d3d17d6b0f870f71aaee809490f0d

    SHA1

    b950298e179d42dbf258a1e1c54498632bdb1b0f

    SHA256

    059e96775bd051ae47b98af33798624f63fa5bf535534b6069531e59eed9805b

    SHA512

    a117f4877f3d5056715fa8d02794aec33201293157901bd818277379dfce327bee004c63aa338926f831a944f167c3834c43114c137b7dc3f3de13584e1c2536

  • /data/user/0/mob.play.rflx/cache/image_cache/7bd46fb321df6937932793c03cce9b6a1d087c6456469f35157d261c825ae558.0.tmp

    Filesize

    514B

    MD5

    81dda838b4265c91ba14d565fa0cad53

    SHA1

    b530fb125d1add3821960edd775c575405e4b073

    SHA256

    a1b2100757eb613302d6296355759624db83d5f452c83422b99f9141edf2b049

    SHA512

    8bb666422d7eb26581db1240524fa7baaf8633981256632ebbf9bf2f4d7617b7ecdd907b8764de16296dbc62bf707c1260599b18facb9ab1c8a4b52a0be0e39d

  • /data/user/0/mob.play.rflx/cache/image_cache/7bd46fb321df6937932793c03cce9b6a1d087c6456469f35157d261c825ae558.1.tmp

    Filesize

    33KB

    MD5

    a66d4e08221acd9db32df4056abdd8a1

    SHA1

    532a02f3dc89b8d889e90eb1d8f438157966082e

    SHA256

    4b8e462ca6c8d3ab2c57645279a16df33c63634abb651eade694e79176d344dc

    SHA512

    97afcb0dc6d3643935a9a419e6abe5dfde0ca38b650a1f0cd7fec11065ad54e6a577f7bcaf6068b1ac47ea95552fda4cfb5c6ea79afc5c77607f832d238a091b

  • /data/user/0/mob.play.rflx/cache/image_cache/84d05a7d3687606aa788ed08bc6bcc9beca383e2c4a33a5b77cdc894966cdfdd.0.tmp

    Filesize

    515B

    MD5

    31659312aaf7854f3eebfc0c7211c71b

    SHA1

    2e8d883ac9666e4ac1cf02577310ce4799dbda38

    SHA256

    eb52b9ec409141b136dd33874f376ed8cecc474b5a6c5f0cfdf3d5b7e0c0692d

    SHA512

    3933af9ed51e5437b417ee252b2eefaa9c5ddc5bd67a338793bb1aba17499a52f5bc756b47d40b2d625edb0a94666765fa87b942e51937b04530ed1548fbf9ca

  • /data/user/0/mob.play.rflx/cache/image_cache/84d05a7d3687606aa788ed08bc6bcc9beca383e2c4a33a5b77cdc894966cdfdd.1.tmp

    Filesize

    440KB

    MD5

    461a4b5f9333912edcae6d8776786d51

    SHA1

    dc64a65077ef8e5699337d22ea2b2372818482df

    SHA256

    0ba0d537fb34b556fb7a914944de7c31e7e152bdc95e1d68471ca9c306009e73

    SHA512

    b854a52e83314edb3c8efdf03789a254d077bc6df1b5c815735e80e976feb71f72fd135931d530118810ae06503b947364125f4577249f9cbaa382510dd6d4b7

  • /data/user/0/mob.play.rflx/cache/image_cache/f28d2c59cefde118c8d9e72a21fbffbd7dca1630b2a3bc43e39531b6f9c7127a.0.tmp

    Filesize

    515B

    MD5

    35eea92cebf3157c7fe261f3f9b4b66e

    SHA1

    1a7add530b8b86eaad372ce4a2b8e8dda9bea676

    SHA256

    cfa519717289622bc31e208840661dd455e5a105d692dd39e8060959a9a5bf8d

    SHA512

    0fe21a6b84e92bd17b9553bae0f256c006783e85aee20fbd9ae133f24707de818e7244dc85c47b35dcf4b3d1f74184efa6acc40c38ab2ca5559e9580842d00af

  • /data/user/0/mob.play.rflx/cache/image_cache/f28d2c59cefde118c8d9e72a21fbffbd7dca1630b2a3bc43e39531b6f9c7127a.1.tmp

    Filesize

    141KB

    MD5

    b2f773a7de9c34a2941a469294bfc3d7

    SHA1

    49b5fb548eba3f32cb76454217b41311345b4b1d

    SHA256

    ad135b5c177e35e9ea9e23c40fbcb715dbf8450ba5336df155928e2a11bd637d

    SHA512

    57f034f583fc2dee46ffb22fe7073d5d72e1e0c709ffd3054bbba0cb9b1e47dda0ad7666fd493ca0bfd5186fd210c0ad12ba5855dac72588762109203bf4322f

  • /data/user/0/mob.play.rflx/cache/image_cache/journal

    Filesize

    1KB

    MD5

    67853a8c0e8942579e597a3ad31bc27c

    SHA1

    3aabc047aef8d8ceb151d9bad8b411ae44e243bf

    SHA256

    9415e920d434f93efa59891f96680499b5ab6117602211313c802cca72d6497c

    SHA512

    08792cdde879c2bdc7d667cfe39e302a5b98f35770ecad9483587dd6358cf0db3c3eb265e7a510e0da39c4ea4cff72ffdf21b893c764103b36f3281b4afd7ccf

  • /data/user/0/mob.play.rflx/cache/image_cache/journal.tmp

    Filesize

    31B

    MD5

    d6ac8c8db0504502d7f0e057a78c5ce3

    SHA1

    8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4

    SHA256

    8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a

    SHA512

    100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851

    Filesize

    16KB

    MD5

    d8dd026d074194f04bcb92f089b467cd

    SHA1

    8458e0ddada889ec2b117779f197fcdaea8e49a7

    SHA256

    aa447ed6696997c97aff974b798097f664dc62780f6846c87427266c46cdd18f

    SHA512

    d93a6737505a786828c4b32705392f21666128b2c28ccd7db515cec4a5d9ab0e48719b84ac0410586f3a19898fb0d970e6f86bb277e78b6a439176e2517404b6

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    512B

    MD5

    7672a7d8d87f5aabacd32a2cae20e931

    SHA1

    878f1989cc23230e22bfcd9762e0649856efd5df

    SHA256

    b7d27df05c75a1a5c5ab71076cdae9b4c42db6f1036f303a69bae55979784d50

    SHA512

    252ed2b2e581139ddc90bb514ea09512f1bd46c8f2c2944ad9b45f7fab50756a336217bd1244d3473be640c65786449fc5131af8545757552e48e92722ccfc40

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    24101d9068ba991b7ee04df20850f984

    SHA1

    b9d3fdbea9de1a178bdad8f679d2ab3cfaa6d0b5

    SHA256

    b90556445e50f7bacf1192b8a9f9ec54f42846e13eb0c850e1fb03243e3fbe1b

    SHA512

    caa77725da730671657650095e25c93b7b2a5c32b2cd0014443d7d77f77b751d61dc49e451412e21354dc2b6ce8111a50f99b8ae479999fdb7f40aee7fe8dc02

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    27022e17af7c253eea18bb5df3113849

    SHA1

    141ffc56e4ef0905b9073703bc81020ac01a1c50

    SHA256

    59d9e2d23d5c6b3c763413695e46c15762e6b6d6777ea08124b24fb4d033b632

    SHA512

    fb09ebd114a3bc58e10f798c551f35a641d1da89563a5e481fab9df8fe03dc627d076b9faa63b453a12ce621a589241a0b86b8ab995221ad1fda5b4230151cea

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    c064b2e4365e63a136357d07534f3a81

    SHA1

    5372bbdde97089806fe481ba07938d4e691f686c

    SHA256

    9111270b7dc5f9a346a49541ab456bb4e8ff261f9209febcfa2868d9921bd44c

    SHA512

    f8452c6b11b491a80d3dfe69a19c4b4130d4ba1c16a660806802344508600cb16eae43e22b7cd496dc76d3222a728071a8eeab69487301ff8c3f6ad45122117b

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    4068b1f7ddd04445c5aa832cae39dfb6

    SHA1

    bffce3b77f24b45d4066c9cfbd10dedac12c93c2

    SHA256

    7174a82a9045aa0a956838835de04680dfe7a51d15f33bac4c76543638364a43

    SHA512

    9300fb78284ed0e4704f4e3b668503d8567b2f69bf92dfe47dfa70af4d2e154f1a1644ad6fc96a1dcf0acf5d44c4e18279481e897afdce7f40411ff105d97cbd

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    a88dc12a91d7620dc0afd7b32ec52065

    SHA1

    22102b4e81c212e08e6a070670a67739076fcb1d

    SHA256

    26b395680351570dad309074929439cc86d37eabd6f19a828ebeb3f2baf1cd2c

    SHA512

    8a811c55797cea5d7f8dafa8eeb7c9c8957506a08c1a9d1e41d6eb0cdf028cdd47b2ba81cd76f675168470bdc62b332c746018e53bfb23d3976cebac673204d3

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    8c575b0064e98631fbbfe2ef83edaaa2

    SHA1

    808e7475a4e610c2356b8620821efd0686d18474

    SHA256

    a848430fdd9e7d640a3cb46baf1c5382ce108ca408ee274b0be9ba503f7e2102

    SHA512

    21a54efb56422ca7c095d0f54cac56ebf1918db6cdc4c207f52c387a74e937d0e30679bff94818f97c305e2c294bed59154952213b03db9ef64aa3446b502df0

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    c675c0e6a3ab88fd826619c4ff7e8dcb

    SHA1

    1dd97816999e7ee2c8b8113bb235f65aeac0f6ce

    SHA256

    8eb9a78ceaa4dc1621afdaf717cd1d4b772d0e41647a87289fa3341c1f661f29

    SHA512

    077795d9acd2b2fac27c9b0a452867c2d6eee1b962dfa26f1e62dc14d322e36a45ef29523a26165c49a2ea8e49a2b3a39a1764d1407b8a64f91ed8f955703b96

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    31369e088244d1b4f0a7d7c6e6df3604

    SHA1

    582efafea12a1eb5376843b3ed53d859afad0811

    SHA256

    8adb82423de5df52347e7524ba2ea504f3a8f44c93b3a91af1c9f1f4aaac59b3

    SHA512

    0bfb770db032742583cb31ee5ddd3986e43f361e17568b4b4821054852d9fbb8b9b8b827d2ff421e2889096a607485cbffa4391561676b122d754ca30c275dbb

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    9e6fefb4306a496558df63ade8add346

    SHA1

    aa352fec2e1f0c04bdfe21e322e083d0b9f2c59d

    SHA256

    9560fb337e3c8247ca4c68fde1869e6bc7fe8b287c5bb92d6de3cc0c74fb623d

    SHA512

    a4966dfe3ea276d169a972cfd69a7df2b3ee9b60eb8824b29029188fafb8a098a09b51caff0f150c4fc725b45c6712c02fdc3c648bedc1a1c4696b36241ae57a

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e59648a28a4735d60dde6cefadb39cba

    SHA1

    658f2fb3c30c9ce805b562c8cc25d60ef69cc783

    SHA256

    bcff3fc10373a0c7060f9360efad26faab85e30291c1a0e99df711b7e1e463c9

    SHA512

    673d3898a9c1165d76916dc5acaab90668fe6555daae938ae2e5bb026a63da9573e67d728ef923306133d791da3dbc7ca385dd27de0d39da358b5277c78fa2a9

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    665137e5ac581d038085705bce8abf66

    SHA1

    f120a61e7108e512f4865cbca381cd692a55d004

    SHA256

    b59c4fe8bff4a87f046d33da69a057f801d9e2a67a501be975efc18ae4339619

    SHA512

    1a6959bd40cd84c20ab8215e400905c3750b80f4dd39f759c03de7256f825c8c425da31af28a822cf92b309f54b1e365db3dfd7ac143dcf219af9c2f0768e704

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    52c9732f1bda37fa8a80110097b84464

    SHA1

    1afbcd792ecb5e7a2f26b32879f20107353d747a

    SHA256

    34fcf6cd417aacf7373b2e6afd9be23ce358f4ae376e529e4149a74ba1f965c0

    SHA512

    7cb723f46737e7f52af89307c3efdf816f66a80b7da563963540dd4c3008979737dc394ae23715f652f2995ba716a345bd2aa86b7e46e6b3f43c280c0b15555f

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    58191eadb5f6103e58bbe7529fb291a8

    SHA1

    93477465d6e7381275c7bae56ff85a2f4dd9c8e8

    SHA256

    0119ce207190b779cbffa226a32b2642bc418da70330062e9762cb470c4bfaa4

    SHA512

    bedad0fc7ac89092d27a7be6ff324cb0cd6a906ac317f5ab870f65374d2c8d8488b146f2c59ae4cebab33cb077e0e9ba597fc1d91268affae0b668634fbe1e4f

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7e6b0bc382bc83bee2531f18a58243af

    SHA1

    0d50744da8d3a5d5f818dfc694d1a86e397bd425

    SHA256

    b0b63a87432b7a3e63f22203c036adb36c4801f6de19638226107cc4bc94c68d

    SHA512

    955b9ea2ee1ace0917b1358cce620edce7d0e5fe0086eb98cf573fd4e261cf9938b7fd925230dd6013930892b70ad64e7930afd9c4e95481dcf5e65292b5e350

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    c12aa4af535c97c2b61645762f6fa798

    SHA1

    9848a7ee951cf787a45051640043e6f8df886877

    SHA256

    7a8ff2cf87f291cf67bf6148c4b663b108e04c8bc410f8a6169baed918584cac

    SHA512

    50daa5b42a6a18b2ac8d3656d5c46a85ce55ea56155692007ce00dfdbbe6e00a449d4fe1357776cabab3cb5f7a615f8667cf603c871172b67b0a2c0db7a559f4

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    87d805a78aef2d01c0e51dc46b3e2f38

    SHA1

    a4036828de15f339171a573259069fa06413afbc

    SHA256

    b4021d50b8f728f7ea860752fcd8fef35795d1b53f9b40228f572692d9bdb884

    SHA512

    57ebde3c2a942e50ca77aba7513bc2c5f650e5933dde1ca6c82be0d6e9167d32ececb4c9ef338956e96104199bac422155876daafdce39c29064671f67bef793

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    88b936aae4ff75bd81cdc15e2d958aa3

    SHA1

    6734500923e1c12dc217654797924666160c58eb

    SHA256

    a5df18450bf722a533e1e99b75b41a992f2ccb0a8284cf325288aa1488aa4760

    SHA512

    edff43612b7c110f8ca044bf074ca55ca5318b778356c9d7ed31f32e14859200d6ef75af199ee9102ede44b3c26b78f7da6c3c96fa34391436a4fc16e9b6945c

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    a0b4222f8c5f43d4234c6d6aec8cdf25

    SHA1

    38e595be13f48d50418a885a2c44e34e808b9318

    SHA256

    02a8ce8bcfa0f7178372dfa7a6f44efd706c007403a27d88ab235ab085b543c0

    SHA512

    505f2f6b603212ab01255b68b39a31abfdd52d731f4412d2447397173640bbfa0b77e6364450e1995ae1dcd46c1ac5a1a5c9514bbc09baf02f2d8bfcc667850a

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    ed0a99dfdfc25409c3688e8c3381df98

    SHA1

    f3b87f6e59175f45b43d699de2d837ec5b072404

    SHA256

    c1dfea34d0f91615d1105c1102738cc260bb672cb54822976f7d2792025e0f70

    SHA512

    34c46499f54641c825a8eb5774ff2ec9c9971bd941ff179432141b824163b1c3a644f69084599286332a3ba17bb86ef4ac932075e57c7d2aea0a0808f579025d

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    8b99f172e687252517baaa5b9ad45e0f

    SHA1

    71527eb644262eae4c3044ca8432e941f1b480b0

    SHA256

    ef4dd8fdc12e8101cb4d826e13add88ee67083ac483ebc013b477b1d0dd7b66f

    SHA512

    787f8b827f202b3be6d909ce9d344547c98cc69c9c42f7a18b1fd0ff4177204d1e58aa0b11bb800787ae029ad64aaa3a45ce07d383d183b0627c5c735fba0180

  • /data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF23A000200011206FB13CB774D91/report

    Filesize

    787B

    MD5

    0b12549b2e9680cd3abb48e32d96cf27

    SHA1

    62ae69e053ac5983fee1d6f121707b46195b7b62

    SHA256

    63e1b1e2b8e5f35beea45247de312d7d2e78572e5d3ae97ea42fd56a9137c0ec

    SHA512

    baa8e62d739387f2d71e03417bf506adff05beacbf22ee258f31edc1f61327c1dfc5a414f605be5775a9ed81c734517200bef78679144a80cc921148fcc674ba

  • /data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF23A000200011206FB13CB774D91/userlog

    Filesize

    185B

    MD5

    24779cc96f0e6fee86a8dfb5e7d52c93

    SHA1

    bc0ff73d7380d606b15dd00668eedac37587bad5

    SHA256

    91ff2461799ff7dfcfe293b514f95b2be731d79b5c142e2d8b23ac256950bcff

    SHA512

    a91565fdc91fbd9dd8b997078a24d6469285ce39bebbce76028b4f01a12c046d93c73a2b762ab9f0835cb2af03d46dc323f26492f205d6d9facc8bd3c8c87281

  • /data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF23A000200011206FB13CB774D91/userlog.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/mob.play.rflx/files/PersistedInstallation182727052351098095tmp

    Filesize

    567B

    MD5

    6354fea791546d877da3b8bf0af3abd3

    SHA1

    35ed57156abe1b334f149badab905d0545974203

    SHA256

    0b9e0ad888b2f3f2134da28f5fa5f66bd77d38808ad22ba94b692dc32414f6b7

    SHA512

    9142c8913cd6ab6e484053b1c7eb6607b656584e3fef74d6f4cd83e8180fd35b2d0de14246dacb60a3421258dcae357034f0abd06bd8641ddaca47cdc6a88591

  • /data/user/0/mob.play.rflx/files/PersistedInstallation3768367569305264392tmp

    Filesize

    90B

    MD5

    a87ffb59f33c0098c88bb8f95b2f2d71

    SHA1

    e41bb0e23e16d36f42b86bdde729eca3d7a97c56

    SHA256

    74b5109fc2c526dd6be50a8cfc486982c36baa60764682aaadba43e2b1d42c38

    SHA512

    60542203d6a3c2482619712c5122cde82554671a1f2228c617c352ae2adc7cd6878c5011ff84fdb2f9e490dd6bc442b1e8a83e92929e29e51bcd87468918a115

  • /data/user/0/mob.play.rflx/files/StartappAdInfoMetadata

    Filesize

    1KB

    MD5

    a66243de517d1bc14654b982000dde30

    SHA1

    e68c23060f1e1bd760ba21a92541b8ee490b7c89

    SHA256

    168fb4d8c0732cc6ae918b4f48895a4b47477d7acfa75a2b83664077c8eb31f5

    SHA512

    72d5095b586abb2ba50ff0c32624e8df42926aebb526e95ad2161df802a97c13f7e5479ecea0cb7e807bc8acdd33a47f9de33c5c742a1c7dbdd8cc9214f5050c

  • /data/user/0/mob.play.rflx/files/StartappAdsMetadata

    Filesize

    2KB

    MD5

    c5ec03049f2a725dbe8dff5598ea7afe

    SHA1

    3272e70169bcb264b8072dec2dda5c2d2f7432a1

    SHA256

    8d11f72942817bf46c3b47ba9e7892b70b5ccee1e01116804ac1d5b683c48840

    SHA512

    8d0134a29ef6c20c39e755d4d36fee2c119ae32d6f05d1d62c8ccf116756f216e8a9825a5cfdd576576d79c9bac33055b47216efea7dd4f966a14111680588c6

  • /data/user/0/mob.play.rflx/files/StartappBannerMetadata

    Filesize

    797B

    MD5

    1464bff0fd2bc323b44f3019e32e43e5

    SHA1

    e723343e3d4bd22bab0510ab4d1233e346b4a838

    SHA256

    5225c5f27e665aa4efe233d9efa63a60e7a62171ed33c1667cbb5bf6b92e44a3

    SHA512

    dcfde2c757c5b83ed0060792c6900f1e2614410a2441563d2bdbadfc24326f73f2fa0fa7f2b7bd4555aa2a2b03c15e0ac3d28ad4836e0fda5484f00f8f2eac01

  • /data/user/0/mob.play.rflx/files/StartappCacheMetadata

    Filesize

    978B

    MD5

    c41164d8f5044093acc85a4f93b1ca1b

    SHA1

    2001e355baa615da01da5bb8b60c88f64d0e57ff

    SHA256

    5e478ae54831bad55c4dcda78db4fa071411c98ddf9d057ff557a36b1cd9c3e4

    SHA512

    3812f2c85d4e24df3e68b0912a2dab1d1fff198ae0cd8c238e925239b19a084cbf2d58831bf5897ce764029f28bbe515b98acfb940ce985280beb9cf6251c57d

  • /data/user/0/mob.play.rflx/files/StartappMetadata

    Filesize

    10KB

    MD5

    6fdc2e6ef3179627b0479298b2739138

    SHA1

    4984fac0d7e256cdfe587af138efa5f4e79acc67

    SHA256

    719c1b9304e53e3e2e91fdaa1b3e6f17474537d9069f87ba439bfb519b820c2f

    SHA512

    03363033410a76d7598aaca6be2b7f3c9f9dbf3a2d74583c18bc29afca41d4127a6b90542d5a6e6b157502d011a82f3492e35de7fc49000a578e19bbdceebc60

  • /data/user/0/mob.play.rflx/files/StartappSplashMetadata

    Filesize

    1KB

    MD5

    84d44d07ee0cd574f5c73907b7a6055e

    SHA1

    19c7bb2bdf7f98e4ec69bbbd94981fd6ef8966c6

    SHA256

    e0a6705cbbe7af1c15e10c45b471bfff79dada9044f17fb7226c8fb6460f7ca2

    SHA512

    d8ecf9b58cb4aa25d14be75bdbd5c941dd5ecc98b85edd26110f93da78b552d3264b5458ae1e26a489f66e0d4771dc147d8afc73b6532a795e6457e27aa27947

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    57B

    MD5

    2f22b6ecf1a0b6f0e97d0ec344c6d53c

    SHA1

    927bf80f3be95e6a6f8eec60203cd0265be163d0

    SHA256

    525934ec7859800fba4c7b9ad6772510d0ca2cf70481d9a78633e70c657116b0

    SHA512

    b0af260da03b8e1fbc0dc2e5d7be9a3080135b9adcc179fb2ec99b8e2f8f79f28dc158c342b7652e6b54ca9d93826d37f3f8b51af383fb2402dc2b5dcb33728f

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    541B

    MD5

    00e29ef01ce44023815d6e0bbdb135e7

    SHA1

    45fa64dcc7bbe6201fb338eb8d5baf579926c6ec

    SHA256

    42a2d8a509b7f7c719c1f6c168849b5961c76fdbfcb693e47e4c0749eaa1d8fc

    SHA512

    fd59d2bbcf1b60ec75af32e75e76b132d7e0aa5029def12eb1181368569d3b0617ed1ecbea5205c92b9ba5f6a45fe8f300c36fa3fb71bb711d372861eedf6dc4

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    676B

    MD5

    27675d6f55925f806414a1f9b05c85a2

    SHA1

    14cda59ee7357cbd27c4dbc03b1ccbd1c5af7c8e

    SHA256

    f3deb507c8c268a3041316682e317cf8c035c5ce155b0e566dadbe2454167ed4

    SHA512

    813d0be6c4b191f560b483981494dc3ca589d76aa8bfb29a9296b3779e3db2bd0473cf38604455673f7b8c809cc690e9ea0fd308141df81ca5248e0368cb398a

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    938B

    MD5

    235f1205334d20f36093d49ffa59b5a9

    SHA1

    9b366793841efbb8f9882b3bb108500dc01e54a8

    SHA256

    b719f7378a5f7f212a81dcd3530268b7d1f34d66e62e77b9edcc2a21ae83fcb8

    SHA512

    81e6d611763c1ef285571c7a5e37fa2443a958a3e886daab1b586609357db560371275482bf5db36a009306b8be751dbdf3a36393090497841d0537723abd683

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-public-data.json

    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/user/0/mob.play.rflx/files/back_.png

    Filesize

    1KB

    MD5

    ebc06fd3d86c27a426932a83325eeffb

    SHA1

    461c990e677114de3baba2a33f0a60c0a10bb9d2

    SHA256

    ada010f03b82133ccddb4ac69a7c81a1d507121ef1d276c7c191bb55401c2230

    SHA512

    3b3c682dc3876f7c813bff1a38e53e0c20f6c776eeb8362a8a750b81d0a3132a207b01740a493c61a03261748399e020aec5fcb7354c723e4f5703efe5418b2b

  • /data/user/0/mob.play.rflx/files/back_dark.png

    Filesize

    1KB

    MD5

    355eb0af21063fefca005d93d6afa9c9

    SHA1

    f854e3d2f0c0470a54e55f31017f9c499bd3671d

    SHA256

    b50339f939827a8e5a918ee4ed1d8213e27f6d546a98313f90449b27a1ebc00d

    SHA512

    ffff59e303636383dccc1282dea4c13b8c46d9aea1d646d745f7d26607cfabc25aea8001af873942749129291abef5dc5a858e7360cbfc145f870b80689b34e9

  • /data/user/0/mob.play.rflx/files/browser_icon_dark.png

    Filesize

    1KB

    MD5

    cac9a26c27728066be7a285defc0df6c

    SHA1

    9931d42eea7663aaec4eb901bcf279b246c19e34

    SHA256

    9347cbd8e6e2af4d09759e55b7595474648619da07992d6485b9756ab4d8170d

    SHA512

    11a3abfc4558e6c887f1f809a3837ffe6f4c1702407db945319acacaa5e677f6b117c07ca676cda6438639a1ebc447a2993e0ff31be8ef797bd219700f508ba5

  • /data/user/0/mob.play.rflx/files/close_button.png

    Filesize

    2KB

    MD5

    2d858e8af5d9426fe061df5c82ffa6ff

    SHA1

    bc1b2eab876aa221b6449d11e482de24b777d58f

    SHA256

    73d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835

    SHA512

    aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c

  • /data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    33B

    MD5

    35b51faac8b5af3886e70bb5a885dab1

    SHA1

    e6cb282da46cd4bf113e25c8573268578dcd11b6

    SHA256

    af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b

    SHA512

    6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

  • /data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    75B

    MD5

    944e6a5a08cb971370c65c06061f0ab4

    SHA1

    84d47725cc29bf167b782c702575bce4bf2ecc5b

    SHA256

    ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab

    SHA512

    bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

  • /data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    121B

    MD5

    ffcbf87665a36fc21782400bd0537e79

    SHA1

    3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee

    SHA256

    a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d

    SHA512

    7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

  • /data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    163B

    MD5

    dcf7d6c1cfd5e7b56074e3001577c78b

    SHA1

    b8eba89aee9f6688ecda6675ef8ff4998da0b141

    SHA256

    ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91

    SHA512

    42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

  • /data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    212B

    MD5

    3c08b481520a46e045ad0511157a901b

    SHA1

    e228a4f5fed73c5a528c4fecab99c30a7e2e31e9

    SHA256

    02b2d731909cbc38af1b6176f4cd4951e7ad6092999bc88e61e54ce1957459f9

    SHA512

    2773bd195320f10ddf176a7e0a2ce8b03514711e9cd4ca849f10609e2b4448af2406ad1d21bce94c023ca522dbc01c80ea105e92ce4c2b724f09e026fc81a126

  • /data/user/0/mob.play.rflx/files/empty_star.png

    Filesize

    895B

    MD5

    76ce13c6312eb334fd351e3b5cff4bf4

    SHA1

    203bd863b812c071ab3ae25bf4ab2f9c4d42942b

    SHA256

    f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8

    SHA512

    d06ba34786090e3b027670a17910d2e35f48eb7bc639e6da1d08214534215797dadd1a56be44422b176801e5d1a1345cd2bf29e73acb6a49bc9a2f7670710783

  • /data/user/0/mob.play.rflx/files/filled_star.png

    Filesize

    753B

    MD5

    317f802aacfab6282b8f74f280e841c1

    SHA1

    3b746a76f6322e97fd6c09a43d03ac14631d93e1

    SHA256

    f37f9a17c20ca3068f4f9db08c262c62b7b86544532f612a78421bdee92f4196

    SHA512

    a714f902ede615507cef840dcc03a5eca183c21c82cc419a924587f38b6974f5aa45fcfcc2bac4d6cf82b81d1b6ad452540e0581751bfcad72e524c83757a301

  • /data/user/0/mob.play.rflx/files/forward_.png

    Filesize

    1KB

    MD5

    9ee047a6801bec9459a9dd5ec7068078

    SHA1

    1aaaffc208e2d86e53fc031e8413169850e65746

    SHA256

    9f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12

    SHA512

    8245818df5ffe06c8f369c8d77479f9f2163d10dac36b0e37c834018b713dc8b063ec1de1862fe16a8c1a769b496652be880ddd48d6fcd24ad766a395bc3ff24

  • /data/user/0/mob.play.rflx/files/forward_dark.png

    Filesize

    1KB

    MD5

    12bfe20382337a84c0fc004a52b9ba9b

    SHA1

    ead15f7ef372c16f78060b8f8c5fc6e0ca6a96f9

    SHA256

    621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5

    SHA512

    7a346febc49154dd348be77f88c6e7ed5c7a531c2fed981f12c40e22a19e4e1a5c51fa766b3122898d97f05e1546a6f2a29b598b0ff441cc7de5e3c505aa33c4

  • /data/user/0/mob.play.rflx/files/half_star.png

    Filesize

    895B

    MD5

    a40e6a567b7aef329bda0ac200f7a23d

    SHA1

    2fa463649c7ba586b28670675a15e0d7a630c7e0

    SHA256

    ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556

    SHA512

    5e77ca21445a09aa903ca08c10c1bcaf769d8273368b7981aacf1bbab08cefb7a521687e78d280828f46b625c99fde02050f5c914dd4d07fd742723f7713ee4f

  • /data/user/0/mob.play.rflx/files/logo.png

    Filesize

    2KB

    MD5

    45c24a8686a0978086c99f7039accc17

    SHA1

    c63ae2601322045390c7a4f230602b74ae18d2d8

    SHA256

    bc9c4aa36a0dd7efe16a8b3bca9172d970fd13d70d3e718aad17a78269079912

    SHA512

    d5861c64b9dc9139904c3bfc7da26fa6f3d9676a5b4203ad617c661d54d3716508fb02f282f5c204bf9d6a0c7162bbb565a44f2ceb96d825177065818b797727

  • /data/user/0/mob.play.rflx/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    a3810bbca95bef642f01534dfd14c387

    SHA1

    8c80cf4d6d96611339ad41c9a62cd3f0982cc31e

    SHA256

    e0f616f71291cdc6fea0b3035bf285483a1b92940c1d9e7def91defc3f98aaa7

    SHA512

    5227f1abc482d53db9156aa2f127ca8815076f9e650b587c31554fad0ff8dbebe2be2f813b151a0e981c657da50210dd5b4618ca0930361077aa449ed6123716

  • /data/user/0/mob.play.rflx/files/shared_prefs_sdk_ad_prefs

    Filesize

    153B

    MD5

    65026ee778e1372d9f4aed742772e893

    SHA1

    5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc

    SHA256

    15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c

    SHA512

    589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

  • /data/user/0/mob.play.rflx/files/x_dark.png

    Filesize

    676B

    MD5

    1b759349f0bf3e55c51e2a2c2802b3cf

    SHA1

    5a608a093fa5f513d1ba52e8a9e01f693c47da98

    SHA256

    59d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443

    SHA512

    3b39d22d0f8368dac2e36884b0316c5aba24180f51cb3a993fdefcdcfd5a36823d6c02c75863cd5a3bc0808223dcadf9934d548c433332bb9528f0eb8cecc0a6

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

    Filesize

    2.1MB

    MD5

    60613793d0bce882b80f2429f3b50edb

    SHA1

    48b22e5a190e572e9014a10c4a4543e57f2cb332

    SHA256

    92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54

    SHA512

    81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)

    Filesize

    719B

    MD5

    d165470950d875a5ef05e52b16fa2b71

    SHA1

    8eea6374a2f17e04a9265785fa1c805c4c3468dd

    SHA256

    ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c

    SHA512

    41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db