Analysis

  • max time kernel
    201s
  • max time network
    328s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    21-07-2024 11:32

General

  • Target

    Eroflix_AF_10.9_MultiPatch_SpydogCustomMobile_UserUpload.Net.apk

  • Size

    6.5MB

  • MD5

    ac1b77d65246799e91fbbaf7c6a9cce9

  • SHA1

    c9b3c027566da411e66942af9a575893ffd41f5c

  • SHA256

    5f80dd7fccff6e15d5eda6e0e8263d9f985462155d23f335baaa0a44ea7f5712

  • SHA512

    f4a832849613f95b6cfceadceab792fd0022a7f925261ca950e963be41103d1bde93bb6c0298de7f13038b2c2f677c986a1637807bea1c27276292a02aba1089

  • SSDEEP

    98304:UUg7Gu5IfRSnPueFuaSMgg6MKRbV+pui2rmyOVLSFivt+OCvibZ+9Uy:ZeGIIteIcx6lbQpuiodMkiViZ

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • mob.play.rflx
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu pipes.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Checks CPU information
    • Checks memory information
    PID:4316

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/misc/profiles/cur/0/mob.play.rflx/primary.prof

    Filesize

    2KB

    MD5

    dbd6a027ef3cc4ee78fbd4abea7c66af

    SHA1

    3bef2effa90bc4f7d4151cc08775877c7ec7cb86

    SHA256

    6683f26e622712f711f6d292fe9ee03e21050d705173aad04aeb27f90c724382

    SHA512

    0d5ed0459df531ed4d9f73fbb76a4130bd0039d1c855696b431f082e1f72c79374a522560f8534ec5b35d24e758e225c02a3f1d419a79877252ca58d2d8da9f8

  • /data/misc/profiles/cur/0/mob.play.rflx/primary.prof

    Filesize

    9KB

    MD5

    0f4b00e8e42ad31db94ad7fdd6cbf8c9

    SHA1

    f99a299434b73772b65d86de76e81c235f398920

    SHA256

    834e399cdce44ef8f1b7c7c95ff5013c8f3c6ab79934c458ce62ba89f609cd71

    SHA512

    113faa9c5059f80c3b5b1ae3b024be500e57baff785294550954ecaf3964eb07c073edbe678428f0527b987b440eec9be08b220baabf2d2f703c3a488581c7f8

  • /data/user/0/mob.play.rflx/cache/image_cache/031e60ddb99976daef347882289ffc229f3930b3f31db30a6b9a6fa36657eaa4.0.tmp

    Filesize

    515B

    MD5

    cf6e552942358b75fb4275a2bda40ffc

    SHA1

    6f9a6f03cd4589462f9c342b01017b9ccbdcbf7b

    SHA256

    0bddf5e4ffff5881b9e54d3e78c709ef8bb74c2b8ec72d8a9672c364280eb28e

    SHA512

    1c44a3f70e9cbd4f07315211cf91e3885c5509164acd946bcbb5294b9691cd7a333d3dd1ea483ebf08cb3751e3099b7fb4a2e58ddfd7294b7cfc81ec0529927b

  • /data/user/0/mob.play.rflx/cache/image_cache/031e60ddb99976daef347882289ffc229f3930b3f31db30a6b9a6fa36657eaa4.1.tmp

    Filesize

    118KB

    MD5

    d39d98b0c06ba2a11a6d3f312cc0c4b8

    SHA1

    f5f26cddc069f48f15f6bcd1709bb72a230aed90

    SHA256

    e0441b18f153ff3e74932cd235eaeafb0da3664732dc7c841ba30b447a1c9bdb

    SHA512

    afc14d7674051aa5505dc8d7a752246e72d845250a2cfad0f5f23893369ed3604babb99565e80c1cd4bfc9ece707e3395b03562ef23547e64cf2edb4e8da3c0d

  • /data/user/0/mob.play.rflx/cache/image_cache/0bae8471c7bdf49e5298a41e35f5c841a04ff4e2df9095bf4187c4a70e21f452.0.tmp

    Filesize

    515B

    MD5

    7fce00cce456ccb215088043727afd52

    SHA1

    26c2e95aa1c37c2622d7fcac6d35283baabe1db7

    SHA256

    df359011344af9006eff4a3ad640cde3c28ea34f9e5792b6d0a00d9147e4cc8e

    SHA512

    45b420be28fde7631ce52c47cacb7d7954bc22016645f510a1e42ba52d3fcc207d450fba76dcc2f46091fe288c5a5bf59d8fa58f6cdab6bc622d3d942d50faae

  • /data/user/0/mob.play.rflx/cache/image_cache/0bae8471c7bdf49e5298a41e35f5c841a04ff4e2df9095bf4187c4a70e21f452.1.tmp

    Filesize

    109KB

    MD5

    bf2b21ddd87123d5cc6a628a32274365

    SHA1

    9adbaf9e1664803578062d18f2b80c846f3dc0b0

    SHA256

    0ac60f93617452fd3b0fbbaddc9abb0cc56bebd08ba23b70fb20834a8136dcad

    SHA512

    ef3acf5a4a1c981ca2fae3e02d3266ac18ee08133693d0fc505c81f5a2f664aba1e7cb3aaf7ff207dac065f1e8b5f8a7f214a079ab8d3a086a99d10d96d9dfea

  • /data/user/0/mob.play.rflx/cache/image_cache/3662a34f6140ee367d3fabc2b627ca2e5f9f179ea0a18554bcf3fe6f9f6c9271.0.tmp

    Filesize

    515B

    MD5

    bc536849198833eacc4d46901f57edb3

    SHA1

    49ff051eb9cc3f4de307b3bc18c992b90468ee2e

    SHA256

    2f701ace518bb63c782d3600a7b4f38ce2ff7cc78537890bcf582d72505cddfa

    SHA512

    d7ce74e97a2d02d3cba2bf189d57c7bbc377b1096618fe550ce7ed36585af03dfa80576b4e4e77f0bb3d9b316438a24fc4ea4fc7a8d1099ee82e73b741df887f

  • /data/user/0/mob.play.rflx/cache/image_cache/3662a34f6140ee367d3fabc2b627ca2e5f9f179ea0a18554bcf3fe6f9f6c9271.1.tmp

    Filesize

    107KB

    MD5

    2fee231df7e88cd6878dc1ca28192bd7

    SHA1

    187e3a6cefd3c360e42cab97bff7ab54943126ca

    SHA256

    757673dbfa7900eeb2395d2495d9a25e0275d4fe46aa3bf32f4f3290fe69c01b

    SHA512

    dc5f59b18620641337910570e1202911d3b6446afae4b0887f6c740d8d93b591975e77ee2a6d77b9163dbf674faf4603f13148e74fdd202dc8cd794e3f4f56b3

  • /data/user/0/mob.play.rflx/cache/image_cache/b18c11d49d0895e2bc4842b731215379019ed695051ce57461b43502e1cc453f.0.tmp

    Filesize

    700B

    MD5

    e8d00e15598e6891d83276bb3ca4177f

    SHA1

    411b65e4f08e556a0799e674660a75c8de2b3ba0

    SHA256

    4d87ef687ebff3a53d043ded39b8cd2947665fd67f4067e4edcd7f26c0244b27

    SHA512

    3bd60693f1e5b43192911c61f9dd2bd0e60045787c278bcfda7b85a4d655691dde6a26afc9b33ae16f8c33a1d4d5ca1a0e8e25adc926f1029639ed82c6dd67fb

  • /data/user/0/mob.play.rflx/cache/image_cache/b18c11d49d0895e2bc4842b731215379019ed695051ce57461b43502e1cc453f.1.tmp

    Filesize

    21KB

    MD5

    a2bbe565cc172511046007aa0db9b02d

    SHA1

    e64293d6ae6633e02f79618ab35d2eb7b269883a

    SHA256

    8da644a688e5aadbe2a44a727634ed93d63a5c6b9a174349700cd2c6eed8eaf1

    SHA512

    d1772927d5b9e59ceadbf8fd005766bfdd000cccafe7b0d7d5da3101ca337c6c30f06f290707df251f8b0c108f8cc27094540adbe7b92d58620c3a2eb06002d1

  • /data/user/0/mob.play.rflx/cache/image_cache/journal

    Filesize

    852B

    MD5

    b5c22802e61a9485c7df158167e52407

    SHA1

    6f9c107693f0f7c7485ef95e4eeb0bd646b4e245

    SHA256

    3feaf97796bd1506a97dcdf521ddbec83d806f3567a3dfdf948be198c5b17ac6

    SHA512

    07efd8edfedb90977b54559266619a40a99393fb283a92f8bae224cea2b7fc2a2b9acaee886fa4718e4a78dba9a5ec2de18004abdb220cef959ac97cd78dd8b0

  • /data/user/0/mob.play.rflx/cache/image_cache/journal.tmp

    Filesize

    31B

    MD5

    d6ac8c8db0504502d7f0e057a78c5ce3

    SHA1

    8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4

    SHA256

    8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a

    SHA512

    100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851

    Filesize

    16KB

    MD5

    e8cf43864bebfa3e65bc39ddb178eb4a

    SHA1

    cd5f0927cd3810f79da1add1e78741251375360e

    SHA256

    82788e71724651d15e2da2d7bcc1decdd6be6cd31f85dc943bd5fa87a6be6b22

    SHA512

    90e200529ea225eeded616b6708d58536636c2ffd071a0a74a814930880bbfac0587ae2aeac06864d84fc655021d1dd15238ff3ca9b87ceace911e5d9808f907

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    512B

    MD5

    04c71ce4db0e8254f463fba9286aa829

    SHA1

    ec0bbd994bfab5f630374fa1c1c943a9ebd91af1

    SHA256

    ddaf7dc8b967b46ab84d70564c3d481caddd3a2a937d7431dd4d1f4067e322de

    SHA512

    81e24a4862634e4530a962b5889a5985aebc24796851dff2f07f0342b12000f02fed52ed50b6b9dab4b699cf06f93b8383228f5580dc546524c47034de7e8ffc

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    f936c483f93821d0135ce6f30f26c057

    SHA1

    d49469f8b69dd633874a248b216a6a06a5785d96

    SHA256

    5694455c7911779b08adbec41154d3993ab40550882c88ca258d1134f3959d8e

    SHA512

    92088f799c9b9b3b20a100b5c69ec494060ca418fb6cbea6ddd361699329eb5dc44cd6e64b6abeaafc7d70afd96a617b47e0938ef9116c9657cefb123fded7cb

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    85d08ce41645a90c361aff711f13f029

    SHA1

    985d381594fe081bb80159b6dc6b76984b7ecf75

    SHA256

    324951b120d9e3f602175b2c2612586ee62612715f5aa9b6a408d811e35c014c

    SHA512

    bd2e7cc0c3c71fe23be36d76750cff74813718ba84df5166d23815bf5ac1aa2be1540f4f2d289f2d0aa901c7fad1cb25a9b14bf253f56440c840c206bdceaa00

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    127fe97da2b39e3747e0d534122cc518

    SHA1

    44072473790d5d0c23535c979ed2be13c802e136

    SHA256

    1ebfb834357f2a988f7e71c399b3bfc098fb82826dfe1bf08a762dc22954093b

    SHA512

    89da1e3e47201241e93acbbd18a4e4f7a735e2ad69328de697e2c164ec1ef2ae91b98b6dcf5f66231b0d026acc26b94fa78773029552877f02ac2e07e265a29f

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    bb0ec69ffac7716f40ddc26993abc078

    SHA1

    930a4775caa790db3a51b240753a15752eb9da12

    SHA256

    491308863485f87b4c2bdfa3a3d7324893359be016c822537db9d4b9115eae55

    SHA512

    e213a293af05dc669ce213efec6f857d5d5301afedddd52711999ed7134c33ea92cd22905b096db048736464902d3cb8c9c9990e6c82206ef61f935e0add654d

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    57d470648fc8b2cababca90c8f182cca

    SHA1

    63737ceeafa6a1df5a7d9aedc174a7dc8ba253ed

    SHA256

    f074ed1661df83981d583d6871e5efcd71cd3eba56aa42ee0e2e9e585ce68731

    SHA512

    7a9b919bca74bb8df1e20845ed603bfa5c30a4ba93135a39a801cd8ec9309865a2a0cb9abfa5c2fe4a5dc69ce4dd5f24b3a13c8b296cc0eff5bb65d5b0f37457

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    4a44d290bd46b9c9621c2cfc887c9a8e

    SHA1

    7c6b896b7110601390c82cffc489bb6ba5ae2719

    SHA256

    0d982e12f235527f2497b7c1203ecee78621c88c3cf53715eb1339d27bcf8416

    SHA512

    a69d5aafe2b37b9253dcd4b999b57658e7873df6c167fe229d6c87856369ad8c8406560d36d8a1c9a126595fe0d8c924190333a8645142d35ed6b47945d02b4a

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    6284173c0523be94ab73c30aa560bef8

    SHA1

    46efd6f66d9fc5228035de11adeb93f76ee3f494

    SHA256

    76204d5f3d91f4759dcbc9825015bae4804c0e6db18adeaf8fc349c4c2a331cf

    SHA512

    e52e91ab2555be3be0c21ebad2d491b500c7ed86243fd11544782132bcd0903ae4e7e4ab32e7ffecd8ef5c5bf6414df3797e3344996215cffb6436a0537f8f77

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    ccb74c237837ed5dcc0e493d933dd8ee

    SHA1

    b0ecb20bbcd5c76492b548def23ddb4d6a117e24

    SHA256

    71c5a0827dde931747301c20ea5fdd11953d783d79e3afc04b16efb618975a9c

    SHA512

    eecd4ed87e642b8b4824788d2ad294f8f33a756b7257b5f3a079c2678a27c1e7aaf7895c833a9fdf500bd2ce4b5883aac246a1a681f33f2c9a2bdb1e5b460dc3

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    dfd5c0771dbb4350886094b52d8c29cc

    SHA1

    12e16be1065cab089066ebf28a7249b0c1020d1d

    SHA256

    813bfd34f93b6c44e02c7d869fc5b31eefd3c056ae02f9c3886f80e964cdb9ae

    SHA512

    1db88bfe205baf682aeaf86e1097c3f786e9a8241f05052dd7267da104786154ae8befe27501b6f3724891c6b18fd497938d537da568a3566f25853cd7f3692e

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    9fd695b42bc39960e83d6522c09984a5

    SHA1

    8b688a2a789eafc4b97a9f954ccf18d1e5a889d3

    SHA256

    a6c83d8e98b67f1766033dae863a3a05b0314ef83d44e7438e9fc1c83e785055

    SHA512

    916ab6960caec214ffcfa76e4af805b6ccb013326a5ba22721cc813da0d435d518cdc1a73d8948aba2735e6e7c9aec66402a3af01ba0cd2a8437666a52ce3038

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    0618046d03f9909b8a1a84e7576d1c19

    SHA1

    8488cded206cb3c707f958883c2f9d59d509c293

    SHA256

    6d3b5075e50d671089b97fa03a6b231f0ad38e88380f48f25a757f4ab720ad58

    SHA512

    b6b4f1eecedd80e1e91cbb6a78e7896c1e0d32473c042ce0f54c208fe7aa78bd6537282c2e1cf422b8a76b6af624368bbeb277df680dbad1a6d81f11db2cc91c

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    53a948295c1753505cd8f7f49710b5ae

    SHA1

    e398efd05632f3112d0bbeb2180d49ac11811fcb

    SHA256

    90ff007ded1d6969c0e0db8d7226d74979e3a7c8a946d59b21b13633a8375adf

    SHA512

    5b7376885d9f7de04255b315754d2bea679e68b10cac2035fce6621b5fea8737234be16d5c1ef07fa2284cc6cb414241dca4d60d3e394fbd26cb84115f4b3bfd

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    3780b2e1c77271dd07b873fd2d1a645e

    SHA1

    5ae7f4cadb3d0f0a4645059a84fa1ee24a01f888

    SHA256

    ea6c1193705e2040c01075dbc312016e061057bf8224787092c6c191de737300

    SHA512

    88d94d8e31022b9d8002108527bea3eff9bd58e2a9fbd24bda07636d15fc7699d08f57c0072a5e70a3b91e65d0e9c1c8b597ee8d5707449395f9236e41404ee9

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    de37948cc6d377da51619a75b94ce6f9

    SHA1

    c4a1c2645ac30c5e113eb6b4ea2f6754feaf12ba

    SHA256

    6e61aa9c8dcc4f1d5e9e48755202261efe29c9eb150609d4b33f3b825f0b674f

    SHA512

    01470ed396483872caed3d9f7b11314be807f9783de09b5cb83f832e1fed2a1e9253a45b24fa55cb8b6f39036a004132018be592b74f8bdde5bcad95a230ab1d

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    68d36fafab653933f40a722e67a0d1b2

    SHA1

    26803cb7b6d06f299993f005bc9b85473b82d06d

    SHA256

    5862c957371bf385ff1ef3969cec488b887ebf8f7116405a851b52c831d3d5e2

    SHA512

    7526d9b280cc86fb175206491610c7d0f1b61f666047f673f8d67831709a70c1f6c89c306c9be1a117442069488f800fd1d4045ab5700df55b57954537d1299b

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c608c0f4edde67ff6b05db5d2f1774b6

    SHA1

    31479dfdfd98e5df69bceb59951feef25d23b575

    SHA256

    fc206a3ae64360ef4dd9985cc8ac6d7e421d92afd3e780f95208ae2da123e980

    SHA512

    b9e27797097439474c00548c17632c2efab1f3b2fc54d300218a50f227a903ad54408a977f8d63ff98be6787e2ab7e47153760361d5d3d20b9952dd8f4dc8102

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    1f2bb76debea42fa3e15aa81afc9c214

    SHA1

    12a2e29aa4e137bd5226da0dac13edc69fa90e75

    SHA256

    ae8db7c1bcd8032695a2d9b05a601ca743d4d045c164b6cbc29e1df7c072eab1

    SHA512

    a17321c1b04294f808168e36334a05ca80be471df4b5a5cb26a5f64834768feea31811de2eb432dabb75a944de43e95fa81c7141ce5e77915e2ea7564038e190

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    d550934abe49c09959e9add520bdba75

    SHA1

    3a03c73d9394d0c34a3ae8494be923cff43a5671

    SHA256

    03efac0f2b4f7c17f57cd5da140dc0a1f2aa1af737d7f3b051092e74182821f2

    SHA512

    34174fc1350080546810789b6d09ba65e3fd33c3e0442dc99d5c298d45b691a6a80cc0db5cdc9579c83dc0b96aec142febf0722abaa0ab0a7bfa54d8a2f50b20

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    f8b5176138d1aa38d247352225c642da

    SHA1

    0dc48ee2c30ee80d9d68a22ca4b68bfcf84d0f12

    SHA256

    05f824be7a69bf04993d5e6f435f7b7816db332b364d284e7ad3d2749739c11c

    SHA512

    31a7cfa6fdf5c9a1a826dd0ac84b5894a10abefc67dd40a7f40b4a205c18320fa11cbe677a6cbf8680463f8b16c488ca086b5b47099a67cea028a79c9613050a

  • /data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    df1d67c803e3821d4f2218dc01b07002

    SHA1

    edaa1fbcd2de8b6d65043adfc9c1ceb2b3cc28a7

    SHA256

    ce87aec4041e8651817ba7437d6e50c24ae6557ea3fb28434ed0c92d81441b8e

    SHA512

    2f2eeb4b845f9d9f0538445d0808a9752614bd275d2b7ee3bb7e858face120e7d4a7e6ffedc4bea9d4eab54ab18443671db9d935e288751c36a75a934ef1e28c

  • /data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF2140179000110DCD568216C7AAF/report

    Filesize

    788B

    MD5

    4a10ff8f47c8c326fac4acfd48ccb5b0

    SHA1

    6fb5924e85abf23104800162c71f533b5e3a66c0

    SHA256

    323d642f791ab6fa99d0ea4f38956c9341d014808c5aa5ea9641bdd9d51d3ceb

    SHA512

    1800d3c000f3b65e48ae3733a7a8194920bfa41c1c45636ccf6316471b464d2fd1f84a4324f42b0f862f1c31610eac644d9529d58a9f25e9d5cc20a90c7404fe

  • /data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF2140179000110DCD568216C7AAF/userlog

    Filesize

    184B

    MD5

    7f5d6832122136963c82b745135833fa

    SHA1

    b737ad028b7500adeff40cd20a5c73e54ed92f35

    SHA256

    cc6805a50b4be435d0618e2f3d86a10783e1a84300b801255a42d01df25274eb

    SHA512

    8a363e6b265575197822c71ab391607d86d5b31c1348a1639f38dde8810a430a61ff1655c64268747f9f0945204d5137bb62827d99db01f8bd1205514bc496c1

  • /data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF2140179000110DCD568216C7AAF/userlog.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/mob.play.rflx/files/PersistedInstallation4001808751041381739tmp

    Filesize

    567B

    MD5

    c12a99fae1161435f191ebe4b2697e48

    SHA1

    b593fe19de3e9b789df3592e0b52eceab60f945e

    SHA256

    b23057f0b7f83b82316f10037fbe62f24f50e8048428af509548fdb5c42a0213

    SHA512

    f5649c8d6ad66414899d69340b4b7b12d5a39b3feca5b1eb73c0440ab35698c79856965583a65710dcbb5cd19b897b0c0259d591ee8999f59483ca2fd2adada1

  • /data/user/0/mob.play.rflx/files/PersistedInstallation745932113098732804tmp

    Filesize

    90B

    MD5

    bef021529fc99fddfc787b6232747728

    SHA1

    fe19e77a4b3a3dc92c977c7f4936f3aba7308468

    SHA256

    03938288615f5eb412e86c27759b6319ecc5b01d8035a664fa9516ae24e95944

    SHA512

    1235d7c76f830f1b12f1fe202bcade338c12af45dd0e9db4b03bf1bf5055c85bb22fa4495488b98adede5a4cc580105469d93c81d83599dc085a67c59f306af0

  • /data/user/0/mob.play.rflx/files/StartappAdInfoMetadata

    Filesize

    1KB

    MD5

    9de290e93742c086fb39a6776a91b8e9

    SHA1

    963c23548feaacaec1c39eadccc86ca3ad3d0fa7

    SHA256

    bdad98e288f6f34d98112184516b77b8cb67f4ff15f44454b465f8a8571f6680

    SHA512

    85a1f99fd6c5fb4ffe91400b1d0f1fb480b7924b08372a0b2fa8d0f890ebfbf4ef437d1938a4b2bae8425ddf70c67969a7fe92b39360113cd7e4c16d56812172

  • /data/user/0/mob.play.rflx/files/StartappAdsMetadata

    Filesize

    2KB

    MD5

    c5ec03049f2a725dbe8dff5598ea7afe

    SHA1

    3272e70169bcb264b8072dec2dda5c2d2f7432a1

    SHA256

    8d11f72942817bf46c3b47ba9e7892b70b5ccee1e01116804ac1d5b683c48840

    SHA512

    8d0134a29ef6c20c39e755d4d36fee2c119ae32d6f05d1d62c8ccf116756f216e8a9825a5cfdd576576d79c9bac33055b47216efea7dd4f966a14111680588c6

  • /data/user/0/mob.play.rflx/files/StartappBannerMetadata

    Filesize

    797B

    MD5

    1464bff0fd2bc323b44f3019e32e43e5

    SHA1

    e723343e3d4bd22bab0510ab4d1233e346b4a838

    SHA256

    5225c5f27e665aa4efe233d9efa63a60e7a62171ed33c1667cbb5bf6b92e44a3

    SHA512

    dcfde2c757c5b83ed0060792c6900f1e2614410a2441563d2bdbadfc24326f73f2fa0fa7f2b7bd4555aa2a2b03c15e0ac3d28ad4836e0fda5484f00f8f2eac01

  • /data/user/0/mob.play.rflx/files/StartappCacheMetadata

    Filesize

    978B

    MD5

    c41164d8f5044093acc85a4f93b1ca1b

    SHA1

    2001e355baa615da01da5bb8b60c88f64d0e57ff

    SHA256

    5e478ae54831bad55c4dcda78db4fa071411c98ddf9d057ff557a36b1cd9c3e4

    SHA512

    3812f2c85d4e24df3e68b0912a2dab1d1fff198ae0cd8c238e925239b19a084cbf2d58831bf5897ce764029f28bbe515b98acfb940ce985280beb9cf6251c57d

  • /data/user/0/mob.play.rflx/files/StartappSplashMetadata

    Filesize

    1KB

    MD5

    84d44d07ee0cd574f5c73907b7a6055e

    SHA1

    19c7bb2bdf7f98e4ec69bbbd94981fd6ef8966c6

    SHA256

    e0a6705cbbe7af1c15e10c45b471bfff79dada9044f17fb7226c8fb6460f7ca2

    SHA512

    d8ecf9b58cb4aa25d14be75bdbd5c941dd5ecc98b85edd26110f93da78b552d3264b5458ae1e26a489f66e0d4771dc147d8afc73b6532a795e6457e27aa27947

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    57B

    MD5

    996d4f06a4c2c3737ae02abfd261a72d

    SHA1

    324c48588cf5d24cd13733d5959c3fa388774d93

    SHA256

    0a8fac8dfd39fb123d5d88229426262fa20c2d5ec6036ef829d442a1497c1feb

    SHA512

    819ae28670b75116145ccb47538f8e8f04b94bf333c73cf08013dc2ffc40b399448a5f0665c961935279849f3f96f7d64de9da20c6edb5b90ee780af805c3661

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    541B

    MD5

    c0a5f593a850470d8d6248db6b45c23b

    SHA1

    b3c5aeaf162920628480cc11539c09db929c54d3

    SHA256

    9e09a2b3877839ac4c8205efa92f15df3703347681be767e120698dc8868a6fb

    SHA512

    c9564c103264c9b67a358d517e5f5148c90b53575fbff5fc5c2ead004d00f1dda691e000effc10b13bad77d2a363a55fe0ba4ac5f4c54f8c267d9abb0c372803

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    676B

    MD5

    0f12e5ae993585091acfb5395ee7b33b

    SHA1

    2633df3844c8dc73879cb7ea5324101f1f4f5f03

    SHA256

    bf85382dcd1ac3054105b3dca5b69ddd9e94319dca7ab5af221422e225eb92c1

    SHA512

    b2e68ea166eb5fa96ccf29fdbe500f437894417ac90e5007d8f4c4860dc16a48d731dd0362cf4424233fc41d7c4a491c8518e9ca012f5761656d25f94f966fe1

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    938B

    MD5

    cf8e8aa93ac8ea8fb8486fc539f54507

    SHA1

    137d6c1a6223700f49549ae91e589246e5764253

    SHA256

    fcd13196b9eeed14297d5ffb98b3d93cc6af54cdc980fb29c6e5160c0fff7a55

    SHA512

    eebf275528379a39c300401d60163eee632c39fca786565d8be3e1a18afbc81e5e34bd1307b17edb0dd97733a4afcb7377833527b00e33a5e7ab42c52a91abc6

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-public-data.json

    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/user/0/mob.play.rflx/files/back_.png

    Filesize

    1KB

    MD5

    f133b06147d3a62e6e7694a7cb9f9882

    SHA1

    16aeb42895bc494690dae7b839ee16e13ac9364a

    SHA256

    b92364b82cdc70e842fe6b11297cc3d3d0e93a348bde284e1b323c80e677a299

    SHA512

    d8f895ce05febfa4fc4d12184ee4c64b3369655efcd07adf5b5473a1040f163fb016173de08e186e94a1484d9f27d2e02b5b6df996037cd24fb309206abcd960

  • /data/user/0/mob.play.rflx/files/back_dark.png

    Filesize

    1KB

    MD5

    465c157abf1e96bac94e1106b07a4df8

    SHA1

    a526c26fdec2d0fcf7a9f5a3a40e848ff8ecb885

    SHA256

    e6072121a50f2be4073367f5cb2f7cde4ec63894891271016427e9ceee42fbd8

    SHA512

    e1de528bf4af3de0660f7b8f2673e4877e58b9d764d2798886967fa4ecad73916385ce73523b33025952cfc9f18f678ba3ab05ead40131aa7e37a3ba4b6be0e2

  • /data/user/0/mob.play.rflx/files/browser_icon_dark.png

    Filesize

    1KB

    MD5

    935454787d07b55a0bf196d23a3d07fa

    SHA1

    ef94b3ff30de349f177c55c1ac7fb4ba962ed281

    SHA256

    62e8f7f85bbeb88d346807f2446524c8ae1779afd61ee23e5ff6f865a5bb7a20

    SHA512

    3783566f7df41eff2862cbac6d132707e352c9ac76bfa8a14b5551f6a824af84e726e20307fa5f95b9f1ee1388300ce70ad3a55202aff75eaf1cc418370d18e5

  • /data/user/0/mob.play.rflx/files/close_button.png

    Filesize

    2KB

    MD5

    2d858e8af5d9426fe061df5c82ffa6ff

    SHA1

    bc1b2eab876aa221b6449d11e482de24b777d58f

    SHA256

    73d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835

    SHA512

    aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c

  • /data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    33B

    MD5

    35b51faac8b5af3886e70bb5a885dab1

    SHA1

    e6cb282da46cd4bf113e25c8573268578dcd11b6

    SHA256

    af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b

    SHA512

    6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

  • /data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    75B

    MD5

    944e6a5a08cb971370c65c06061f0ab4

    SHA1

    84d47725cc29bf167b782c702575bce4bf2ecc5b

    SHA256

    ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab

    SHA512

    bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

  • /data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    121B

    MD5

    ffcbf87665a36fc21782400bd0537e79

    SHA1

    3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee

    SHA256

    a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d

    SHA512

    7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

  • /data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    163B

    MD5

    dcf7d6c1cfd5e7b56074e3001577c78b

    SHA1

    b8eba89aee9f6688ecda6675ef8ff4998da0b141

    SHA256

    ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91

    SHA512

    42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

  • /data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    212B

    MD5

    a22038efa7dbbc722daf5073f8eb9c90

    SHA1

    3fa9b0d58603bf99f63a3f36fda9906cf5e4c671

    SHA256

    f6843ac8bbff316398daacf499403e758be2724ff2ae998b0124374ed5ebb6e8

    SHA512

    0f099533e7488fe72b4953f1065a8830f87d6904d0242dec533d2bb46fa991891d0b35f475b93658c76901c031f6ded5ac467673b5c95efbb6e3b2066c8c0251

  • /data/user/0/mob.play.rflx/files/empty_star.png

    Filesize

    895B

    MD5

    76ce13c6312eb334fd351e3b5cff4bf4

    SHA1

    203bd863b812c071ab3ae25bf4ab2f9c4d42942b

    SHA256

    f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8

    SHA512

    d06ba34786090e3b027670a17910d2e35f48eb7bc639e6da1d08214534215797dadd1a56be44422b176801e5d1a1345cd2bf29e73acb6a49bc9a2f7670710783

  • /data/user/0/mob.play.rflx/files/filled_star.png

    Filesize

    756B

    MD5

    9db1f35e41f85aad692b8cabf46526a4

    SHA1

    18c91529430ea98ec6874a39811554dbf9caa6a9

    SHA256

    61550b17a9d3cd07bedefc4ee59c88b426a138151bac40802cfc512fd2642a36

    SHA512

    785b85c34cecb010e62b8643738d82c26b4d2c07092e3da8e8775ac1c10044a09ac7e1ac5f1cc01ab2c566bc2150aa406ddce87d91685a7d712cfe3236078d22

  • /data/user/0/mob.play.rflx/files/forward_.png

    Filesize

    1KB

    MD5

    9ee047a6801bec9459a9dd5ec7068078

    SHA1

    1aaaffc208e2d86e53fc031e8413169850e65746

    SHA256

    9f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12

    SHA512

    8245818df5ffe06c8f369c8d77479f9f2163d10dac36b0e37c834018b713dc8b063ec1de1862fe16a8c1a769b496652be880ddd48d6fcd24ad766a395bc3ff24

  • /data/user/0/mob.play.rflx/files/forward_dark.png

    Filesize

    1KB

    MD5

    12bfe20382337a84c0fc004a52b9ba9b

    SHA1

    ead15f7ef372c16f78060b8f8c5fc6e0ca6a96f9

    SHA256

    621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5

    SHA512

    7a346febc49154dd348be77f88c6e7ed5c7a531c2fed981f12c40e22a19e4e1a5c51fa766b3122898d97f05e1546a6f2a29b598b0ff441cc7de5e3c505aa33c4

  • /data/user/0/mob.play.rflx/files/half_star.png

    Filesize

    895B

    MD5

    a40e6a567b7aef329bda0ac200f7a23d

    SHA1

    2fa463649c7ba586b28670675a15e0d7a630c7e0

    SHA256

    ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556

    SHA512

    5e77ca21445a09aa903ca08c10c1bcaf769d8273368b7981aacf1bbab08cefb7a521687e78d280828f46b625c99fde02050f5c914dd4d07fd742723f7713ee4f

  • /data/user/0/mob.play.rflx/files/logo.png

    Filesize

    2KB

    MD5

    515c02d5e8e7f90a61ee1bdc68b6ebf1

    SHA1

    e55704189d65197fe05a9b4a23b4485cf3821ab8

    SHA256

    cadcf1170b3525a41737faf72b9c2fbf3282a5c4a8cd341518512177e5b3d36d

    SHA512

    7d27ed2cfb09bafea7a1b4145157c8920c631a332eeb1380ce1174676b9b119c3bfd928c344aa53c5da763cfb79403a4519354e5bd3df99356db4a3bfda340b6

  • /data/user/0/mob.play.rflx/files/profileInstalled

    Filesize

    24B

    MD5

    2be7c61bca24a02ccc09d04fee7701cd

    SHA1

    8e36195a7e80d558dfa2d921fbce03b2d94f98c8

    SHA256

    b453915b4ba7d33a790830517c4730da3866406f57d2dd89bbdf25af8697bbcd

    SHA512

    83a7eebc8f6ac679892c9293de24d1f23fc1988b2292d16a4f0b9f69f18578938756f9c930fcc1998eeb597924c9606e2eafc503de955cef4326a64cd5e81547

  • /data/user/0/mob.play.rflx/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    63387ca475f002563e2bb91b829324d4

    SHA1

    9ef9a07fa1fc2f7fb547077ce30c714386b550a0

    SHA256

    587e812efba124d29941be0312c65e6ff7baaf3bcc745c286e622886b580c931

    SHA512

    a4550b4519e0c675c6fb33e009e243321a455141c86c1b00798c5c2d692151b91a2d466de109bc3e72d3ec8ee984f56f6e1e9bcb885bc6b00355f90a4f7ddf78

  • /data/user/0/mob.play.rflx/files/x_dark.png

    Filesize

    676B

    MD5

    1b759349f0bf3e55c51e2a2c2802b3cf

    SHA1

    5a608a093fa5f513d1ba52e8a9e01f693c47da98

    SHA256

    59d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443

    SHA512

    3b39d22d0f8368dac2e36884b0316c5aba24180f51cb3a993fdefcdcfd5a36823d6c02c75863cd5a3bc0808223dcadf9934d548c433332bb9528f0eb8cecc0a6

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

    Filesize

    2.1MB

    MD5

    60613793d0bce882b80f2429f3b50edb

    SHA1

    48b22e5a190e572e9014a10c4a4543e57f2cb332

    SHA256

    92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54

    SHA512

    81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)

    Filesize

    719B

    MD5

    d165470950d875a5ef05e52b16fa2b71

    SHA1

    8eea6374a2f17e04a9265785fa1c805c4c3468dd

    SHA256

    ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c

    SHA512

    41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db