Malware Analysis Report

2024-09-09 16:21

Sample ID 240721-nnrnda1elk
Target Eroflix_AF_10.9_MultiPatch_SpydogCustomMobile_UserUpload.Net.apk
SHA256 5f80dd7fccff6e15d5eda6e0e8263d9f985462155d23f335baaa0a44ea7f5712
Tags
collection credential_access discovery evasion execution impact persistence antidot
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

5f80dd7fccff6e15d5eda6e0e8263d9f985462155d23f335baaa0a44ea7f5712

Threat Level: Known bad

The file Eroflix_AF_10.9_MultiPatch_SpydogCustomMobile_UserUpload.Net.apk was found to be: Known bad.

Malicious Activity Summary

collection credential_access discovery evasion execution impact persistence antidot

Antidot family

Antidot payload

Checks if the Android device is rooted.

Checks known Qemu pipes.

Queries information about running processes on the device

Obtains sensitive information copied to the device clipboard

Requests dangerous framework permissions

Queries the mobile country code (MCC)

Reads information about phone network operator.

Queries information about active data network

Checks the presence of a debugger

Schedules tasks to execute at a specified time

Checks CPU information

Checks memory information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-07-21 11:32

Signatures

Antidot family

antidot

Antidot payload

Description Indicator Process Target
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-21 11:32

Reported

2024-07-21 11:39

Platform

android-x64-arm64-20240624-en

Max time kernel

307s

Max time network

326s

Command Line

mob.play.rflx

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/sd/xbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /data/local/xbin/su N/A N/A
N/A /system/bin/failsafe/su N/A N/A
N/A /data/local/su N/A N/A
N/A /data/local/bin/su N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/socket/qemud N/A N/A
N/A /dev/qemu_pipe N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

mob.play.rflx

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.187.206:443 tcp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.212.206:443 android.apis.google.com tcp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
US 1.1.1.1:53 firebase-settings.crashlytics.col udp
GB 216.58.212.195:443 firebase-settings.crashlytics.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.213.8:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 configv2.unityads.unity3d.com udp
US 34.110.229.214:443 configv2.unityads.unity3d.com tcp
US 1.1.1.1:53 infoevent.startappservice.com udp
SG 213.35.117.150:443 infoevent.startappservice.com tcp
US 1.1.1.1:53 adsmetadata.startappservice.com udp
SG 138.2.110.152:443 adsmetadata.startappservice.com tcp
SG 138.2.110.152:443 adsmetadata.startappservice.com tcp
US 1.1.1.1:53 api.npoint.io udp
US 216.24.57.4:443 api.npoint.io tcp
US 1.1.1.1:53 info.startappservice.com udp
US 68.232.34.193:443 info.startappservice.com tcp
US 68.232.34.193:443 info.startappservice.com tcp
US 34.110.229.214:443 configv2.unityads.unity3d.com tcp
US 1.1.1.1:53 m.media-amazon.com udp
US 1.1.1.1:53 i.imgur.com udp
US 151.101.129.16:443 m.media-amazon.com tcp
US 151.101.129.16:443 m.media-amazon.com tcp
US 151.101.129.16:443 m.media-amazon.com tcp
US 151.101.129.16:443 m.media-amazon.com tcp
US 151.101.129.16:443 m.media-amazon.com tcp
US 199.232.196.193:443 i.imgur.com tcp
US 1.1.1.1:53 webview.unityads.unity3d.com udp
GB 18.165.227.39:443 webview.unityads.unity3d.com tcp
US 1.1.1.1:53 sdk-exchange.startappservice.com udp
US 1.1.1.1:53 trackdownload.startappservice.com udp
US 158.101.105.86:443 trackdownload.startappservice.com tcp
DE 132.145.224.90:443 sdk-exchange.startappservice.com tcp
SG 213.35.117.150:443 adsmetadata.startappservice.com tcp
US 1.1.1.1:53 thind.unityads.unity3d.com udp
US 34.107.172.168:443 thind.unityads.unity3d.com tcp
US 34.107.172.168:443 thind.unityads.unity3d.com tcp
US 1.1.1.1:53 auction-load.unityads.unity3d.com udp
US 34.110.184.100:443 auction-load.unityads.unity3d.com tcp
US 1.1.1.1:53 httpkafka.unityads.unity3d.com udp
US 35.244.205.3:443 httpkafka.unityads.unity3d.com tcp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp
DE 132.145.224.90:443 sdk-exchange.startappservice.com tcp
DE 132.145.224.90:443 sdk-exchange.startappservice.com tcp
GB 142.250.200.34:443 tcp
GB 142.250.187.227:443 tcp

Files

/data/user/0/mob.play.rflx/files/PersistedInstallation3768367569305264392tmp

MD5 a87ffb59f33c0098c88bb8f95b2f2d71
SHA1 e41bb0e23e16d36f42b86bdde729eca3d7a97c56
SHA256 74b5109fc2c526dd6be50a8cfc486982c36baa60764682aaadba43e2b1d42c38
SHA512 60542203d6a3c2482619712c5122cde82554671a1f2228c617c352ae2adc7cd6878c5011ff84fdb2f9e490dd6bc442b1e8a83e92929e29e51bcd87468918a115

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 31369e088244d1b4f0a7d7c6e6df3604
SHA1 582efafea12a1eb5376843b3ed53d859afad0811
SHA256 8adb82423de5df52347e7524ba2ea504f3a8f44c93b3a91af1c9f1f4aaac59b3
SHA512 0bfb770db032742583cb31ee5ddd3986e43f361e17568b4b4821054852d9fbb8b9b8b827d2ff421e2889096a607485cbffa4391561676b122d754ca30c275dbb

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events

MD5 8c575b0064e98631fbbfe2ef83edaaa2
SHA1 808e7475a4e610c2356b8620821efd0686d18474
SHA256 a848430fdd9e7d640a3cb46baf1c5382ce108ca408ee274b0be9ba503f7e2102
SHA512 21a54efb56422ca7c095d0f54cac56ebf1918db6cdc4c207f52c387a74e937d0e30679bff94818f97c305e2c294bed59154952213b03db9ef64aa3446b502df0

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 9e6fefb4306a496558df63ade8add346
SHA1 aa352fec2e1f0c04bdfe21e322e083d0b9f2c59d
SHA256 9560fb337e3c8247ca4c68fde1869e6bc7fe8b287c5bb92d6de3cc0c74fb623d
SHA512 a4966dfe3ea276d169a972cfd69a7df2b3ee9b60eb8824b29029188fafb8a098a09b51caff0f150c4fc725b45c6712c02fdc3c648bedc1a1c4696b36241ae57a

/data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF23A000200011206FB13CB774D91/report

MD5 0b12549b2e9680cd3abb48e32d96cf27
SHA1 62ae69e053ac5983fee1d6f121707b46195b7b62
SHA256 63e1b1e2b8e5f35beea45247de312d7d2e78572e5d3ae97ea42fd56a9137c0ec
SHA512 baa8e62d739387f2d71e03417bf506adff05beacbf22ee258f31edc1f61327c1dfc5a414f605be5775a9ed81c734517200bef78679144a80cc921148fcc674ba

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 c675c0e6a3ab88fd826619c4ff7e8dcb
SHA1 1dd97816999e7ee2c8b8113bb235f65aeac0f6ce
SHA256 8eb9a78ceaa4dc1621afdaf717cd1d4b772d0e41647a87289fa3341c1f661f29
SHA512 077795d9acd2b2fac27c9b0a452867c2d6eee1b962dfa26f1e62dc14d322e36a45ef29523a26165c49a2ea8e49a2b3a39a1764d1407b8a64f91ed8f955703b96

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 7672a7d8d87f5aabacd32a2cae20e931
SHA1 878f1989cc23230e22bfcd9762e0649856efd5df
SHA256 b7d27df05c75a1a5c5ab71076cdae9b4c42db6f1036f303a69bae55979784d50
SHA512 252ed2b2e581139ddc90bb514ea09512f1bd46c8f2c2944ad9b45f7fab50756a336217bd1244d3473be640c65786449fc5131af8545757552e48e92722ccfc40

/data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 35b51faac8b5af3886e70bb5a885dab1
SHA1 e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256 af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA512 6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851

MD5 d8dd026d074194f04bcb92f089b467cd
SHA1 8458e0ddada889ec2b117779f197fcdaea8e49a7
SHA256 aa447ed6696997c97aff974b798097f664dc62780f6846c87427266c46cdd18f
SHA512 d93a6737505a786828c4b32705392f21666128b2c28ccd7db515cec4a5d9ab0e48719b84ac0410586f3a19898fb0d970e6f86bb277e78b6a439176e2517404b6

/data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 944e6a5a08cb971370c65c06061f0ab4
SHA1 84d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256 ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512 bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

/data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 ffcbf87665a36fc21782400bd0537e79
SHA1 3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256 a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA512 7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 24101d9068ba991b7ee04df20850f984
SHA1 b9d3fdbea9de1a178bdad8f679d2ab3cfaa6d0b5
SHA256 b90556445e50f7bacf1192b8a9f9ec54f42846e13eb0c850e1fb03243e3fbe1b
SHA512 caa77725da730671657650095e25c93b7b2a5c32b2cd0014443d7d77f77b751d61dc49e451412e21354dc2b6ce8111a50f99b8ae479999fdb7f40aee7fe8dc02

/data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 dcf7d6c1cfd5e7b56074e3001577c78b
SHA1 b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256 ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA512 42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

/data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 3c08b481520a46e045ad0511157a901b
SHA1 e228a4f5fed73c5a528c4fecab99c30a7e2e31e9
SHA256 02b2d731909cbc38af1b6176f4cd4951e7ad6092999bc88e61e54ce1957459f9
SHA512 2773bd195320f10ddf176a7e0a2ce8b03514711e9cd4ca849f10609e2b4448af2406ad1d21bce94c023ca522dbc01c80ea105e92ce4c2b724f09e026fc81a126

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 27022e17af7c253eea18bb5df3113849
SHA1 141ffc56e4ef0905b9073703bc81020ac01a1c50
SHA256 59d9e2d23d5c6b3c763413695e46c15762e6b6d6777ea08124b24fb4d033b632
SHA512 fb09ebd114a3bc58e10f798c551f35a641d1da89563a5e481fab9df8fe03dc627d076b9faa63b453a12ce621a589241a0b86b8ab995221ad1fda5b4230151cea

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/user/0/mob.play.rflx/files/UnityAdsStorage-public-data.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 2f22b6ecf1a0b6f0e97d0ec344c6d53c
SHA1 927bf80f3be95e6a6f8eec60203cd0265be163d0
SHA256 525934ec7859800fba4c7b9ad6772510d0ca2cf70481d9a78633e70c657116b0
SHA512 b0af260da03b8e1fbc0dc2e5d7be9a3080135b9adcc179fb2ec99b8e2f8f79f28dc158c342b7652e6b54ca9d93826d37f3f8b51af383fb2402dc2b5dcb33728f

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 c064b2e4365e63a136357d07534f3a81
SHA1 5372bbdde97089806fe481ba07938d4e691f686c
SHA256 9111270b7dc5f9a346a49541ab456bb4e8ff261f9209febcfa2868d9921bd44c
SHA512 f8452c6b11b491a80d3dfe69a19c4b4130d4ba1c16a660806802344508600cb16eae43e22b7cd496dc76d3222a728071a8eeab69487301ff8c3f6ad45122117b

/data/user/0/mob.play.rflx/files/PersistedInstallation182727052351098095tmp

MD5 6354fea791546d877da3b8bf0af3abd3
SHA1 35ed57156abe1b334f149badab905d0545974203
SHA256 0b9e0ad888b2f3f2134da28f5fa5f66bd77d38808ad22ba94b692dc32414f6b7
SHA512 9142c8913cd6ab6e484053b1c7eb6607b656584e3fef74d6f4cd83e8180fd35b2d0de14246dacb60a3421258dcae357034f0abd06bd8641ddaca47cdc6a88591

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 4068b1f7ddd04445c5aa832cae39dfb6
SHA1 bffce3b77f24b45d4066c9cfbd10dedac12c93c2
SHA256 7174a82a9045aa0a956838835de04680dfe7a51d15f33bac4c76543638364a43
SHA512 9300fb78284ed0e4704f4e3b668503d8567b2f69bf92dfe47dfa70af4d2e154f1a1644ad6fc96a1dcf0acf5d44c4e18279481e897afdce7f40411ff105d97cbd

/data/user/0/mob.play.rflx/files/shared_prefs_sdk_ad_prefs

MD5 65026ee778e1372d9f4aed742772e893
SHA1 5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc
SHA256 15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c
SHA512 589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 c12aa4af535c97c2b61645762f6fa798
SHA1 9848a7ee951cf787a45051640043e6f8df886877
SHA256 7a8ff2cf87f291cf67bf6148c4b663b108e04c8bc410f8a6169baed918584cac
SHA512 50daa5b42a6a18b2ac8d3656d5c46a85ce55ea56155692007ce00dfdbbe6e00a449d4fe1357776cabab3cb5f7a615f8667cf603c871172b67b0a2c0db7a559f4

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 87d805a78aef2d01c0e51dc46b3e2f38
SHA1 a4036828de15f339171a573259069fa06413afbc
SHA256 b4021d50b8f728f7ea860752fcd8fef35795d1b53f9b40228f572692d9bdb884
SHA512 57ebde3c2a942e50ca77aba7513bc2c5f650e5933dde1ca6c82be0d6e9167d32ececb4c9ef338956e96104199bac422155876daafdce39c29064671f67bef793

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 88b936aae4ff75bd81cdc15e2d958aa3
SHA1 6734500923e1c12dc217654797924666160c58eb
SHA256 a5df18450bf722a533e1e99b75b41a992f2ccb0a8284cf325288aa1488aa4760
SHA512 edff43612b7c110f8ca044bf074ca55ca5318b778356c9d7ed31f32e14859200d6ef75af199ee9102ede44b3c26b78f7da6c3c96fa34391436a4fc16e9b6945c

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 a0b4222f8c5f43d4234c6d6aec8cdf25
SHA1 38e595be13f48d50418a885a2c44e34e808b9318
SHA256 02a8ce8bcfa0f7178372dfa7a6f44efd706c007403a27d88ab235ab085b543c0
SHA512 505f2f6b603212ab01255b68b39a31abfdd52d731f4412d2447397173640bbfa0b77e6364450e1995ae1dcd46c1ac5a1a5c9514bbc09baf02f2d8bfcc667850a

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 ed0a99dfdfc25409c3688e8c3381df98
SHA1 f3b87f6e59175f45b43d699de2d837ec5b072404
SHA256 c1dfea34d0f91615d1105c1102738cc260bb672cb54822976f7d2792025e0f70
SHA512 34c46499f54641c825a8eb5774ff2ec9c9971bd941ff179432141b824163b1c3a644f69084599286332a3ba17bb86ef4ac932075e57c7d2aea0a0808f579025d

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 8b99f172e687252517baaa5b9ad45e0f
SHA1 71527eb644262eae4c3044ca8432e941f1b480b0
SHA256 ef4dd8fdc12e8101cb4d826e13add88ee67083ac483ebc013b477b1d0dd7b66f
SHA512 787f8b827f202b3be6d909ce9d344547c98cc69c9c42f7a18b1fd0ff4177204d1e58aa0b11bb800787ae029ad64aaa3a45ce07d383d183b0627c5c735fba0180

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 e59648a28a4735d60dde6cefadb39cba
SHA1 658f2fb3c30c9ce805b562c8cc25d60ef69cc783
SHA256 bcff3fc10373a0c7060f9360efad26faab85e30291c1a0e99df711b7e1e463c9
SHA512 673d3898a9c1165d76916dc5acaab90668fe6555daae938ae2e5bb026a63da9573e67d728ef923306133d791da3dbc7ca385dd27de0d39da358b5277c78fa2a9

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 665137e5ac581d038085705bce8abf66
SHA1 f120a61e7108e512f4865cbca381cd692a55d004
SHA256 b59c4fe8bff4a87f046d33da69a057f801d9e2a67a501be975efc18ae4339619
SHA512 1a6959bd40cd84c20ab8215e400905c3750b80f4dd39f759c03de7256f825c8c425da31af28a822cf92b309f54b1e365db3dfd7ac143dcf219af9c2f0768e704

/data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF23A000200011206FB13CB774D91/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF23A000200011206FB13CB774D91/userlog

MD5 24779cc96f0e6fee86a8dfb5e7d52c93
SHA1 bc0ff73d7380d606b15dd00668eedac37587bad5
SHA256 91ff2461799ff7dfcfe293b514f95b2be731d79b5c142e2d8b23ac256950bcff
SHA512 a91565fdc91fbd9dd8b997078a24d6469285ce39bebbce76028b4f01a12c046d93c73a2b762ab9f0835cb2af03d46dc323f26492f205d6d9facc8bd3c8c87281

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 a88dc12a91d7620dc0afd7b32ec52065
SHA1 22102b4e81c212e08e6a070670a67739076fcb1d
SHA256 26b395680351570dad309074929439cc86d37eabd6f19a828ebeb3f2baf1cd2c
SHA512 8a811c55797cea5d7f8dafa8eeb7c9c8957506a08c1a9d1e41d6eb0cdf028cdd47b2ba81cd76f675168470bdc62b332c746018e53bfb23d3976cebac673204d3

/data/user/0/mob.play.rflx/files/StartappAdsMetadata

MD5 c5ec03049f2a725dbe8dff5598ea7afe
SHA1 3272e70169bcb264b8072dec2dda5c2d2f7432a1
SHA256 8d11f72942817bf46c3b47ba9e7892b70b5ccee1e01116804ac1d5b683c48840
SHA512 8d0134a29ef6c20c39e755d4d36fee2c119ae32d6f05d1d62c8ccf116756f216e8a9825a5cfdd576576d79c9bac33055b47216efea7dd4f966a14111680588c6

/data/user/0/mob.play.rflx/files/StartappBannerMetadata

MD5 1464bff0fd2bc323b44f3019e32e43e5
SHA1 e723343e3d4bd22bab0510ab4d1233e346b4a838
SHA256 5225c5f27e665aa4efe233d9efa63a60e7a62171ed33c1667cbb5bf6b92e44a3
SHA512 dcfde2c757c5b83ed0060792c6900f1e2614410a2441563d2bdbadfc24326f73f2fa0fa7f2b7bd4555aa2a2b03c15e0ac3d28ad4836e0fda5484f00f8f2eac01

/data/user/0/mob.play.rflx/files/StartappSplashMetadata

MD5 84d44d07ee0cd574f5c73907b7a6055e
SHA1 19c7bb2bdf7f98e4ec69bbbd94981fd6ef8966c6
SHA256 e0a6705cbbe7af1c15e10c45b471bfff79dada9044f17fb7226c8fb6460f7ca2
SHA512 d8ecf9b58cb4aa25d14be75bdbd5c941dd5ecc98b85edd26110f93da78b552d3264b5458ae1e26a489f66e0d4771dc147d8afc73b6532a795e6457e27aa27947

/data/user/0/mob.play.rflx/files/StartappCacheMetadata

MD5 c41164d8f5044093acc85a4f93b1ca1b
SHA1 2001e355baa615da01da5bb8b60c88f64d0e57ff
SHA256 5e478ae54831bad55c4dcda78db4fa071411c98ddf9d057ff557a36b1cd9c3e4
SHA512 3812f2c85d4e24df3e68b0912a2dab1d1fff198ae0cd8c238e925239b19a084cbf2d58831bf5897ce764029f28bbe515b98acfb940ce985280beb9cf6251c57d

/data/user/0/mob.play.rflx/files/StartappAdInfoMetadata

MD5 a66243de517d1bc14654b982000dde30
SHA1 e68c23060f1e1bd760ba21a92541b8ee490b7c89
SHA256 168fb4d8c0732cc6ae918b4f48895a4b47477d7acfa75a2b83664077c8eb31f5
SHA512 72d5095b586abb2ba50ff0c32624e8df42926aebb526e95ad2161df802a97c13f7e5479ecea0cb7e807bc8acdd33a47f9de33c5c742a1c7dbdd8cc9214f5050c

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 52c9732f1bda37fa8a80110097b84464
SHA1 1afbcd792ecb5e7a2f26b32879f20107353d747a
SHA256 34fcf6cd417aacf7373b2e6afd9be23ce358f4ae376e529e4149a74ba1f965c0
SHA512 7cb723f46737e7f52af89307c3efdf816f66a80b7da563963540dd4c3008979737dc394ae23715f652f2995ba716a345bd2aa86b7e46e6b3f43c280c0b15555f

/data/user/0/mob.play.rflx/files/StartappMetadata

MD5 6fdc2e6ef3179627b0479298b2739138
SHA1 4984fac0d7e256cdfe587af138efa5f4e79acc67
SHA256 719c1b9304e53e3e2e91fdaa1b3e6f17474537d9069f87ba439bfb519b820c2f
SHA512 03363033410a76d7598aaca6be2b7f3c9f9dbf3a2d74583c18bc29afca41d4127a6b90542d5a6e6b157502d011a82f3492e35de7fc49000a578e19bbdceebc60

/data/user/0/mob.play.rflx/cache/image_cache/journal.tmp

MD5 d6ac8c8db0504502d7f0e057a78c5ce3
SHA1 8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4
SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
SHA512 100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

/data/user/0/mob.play.rflx/files/close_button.png

MD5 2d858e8af5d9426fe061df5c82ffa6ff
SHA1 bc1b2eab876aa221b6449d11e482de24b777d58f
SHA256 73d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835
SHA512 aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)

MD5 d165470950d875a5ef05e52b16fa2b71
SHA1 8eea6374a2f17e04a9265785fa1c805c4c3468dd
SHA256 ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c
SHA512 41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db

/data/user/0/mob.play.rflx/files/back_.png

MD5 ebc06fd3d86c27a426932a83325eeffb
SHA1 461c990e677114de3baba2a33f0a60c0a10bb9d2
SHA256 ada010f03b82133ccddb4ac69a7c81a1d507121ef1d276c7c191bb55401c2230
SHA512 3b3c682dc3876f7c813bff1a38e53e0c20f6c776eeb8362a8a750b81d0a3132a207b01740a493c61a03261748399e020aec5fcb7354c723e4f5703efe5418b2b

/data/user/0/mob.play.rflx/cache/image_cache/journal

MD5 67853a8c0e8942579e597a3ad31bc27c
SHA1 3aabc047aef8d8ceb151d9bad8b411ae44e243bf
SHA256 9415e920d434f93efa59891f96680499b5ab6117602211313c802cca72d6497c
SHA512 08792cdde879c2bdc7d667cfe39e302a5b98f35770ecad9483587dd6358cf0db3c3eb265e7a510e0da39c4ea4cff72ffdf21b893c764103b36f3281b4afd7ccf

/data/user/0/mob.play.rflx/files/back_dark.png

MD5 355eb0af21063fefca005d93d6afa9c9
SHA1 f854e3d2f0c0470a54e55f31017f9c499bd3671d
SHA256 b50339f939827a8e5a918ee4ed1d8213e27f6d546a98313f90449b27a1ebc00d
SHA512 ffff59e303636383dccc1282dea4c13b8c46d9aea1d646d745f7d26607cfabc25aea8001af873942749129291abef5dc5a858e7360cbfc145f870b80689b34e9

/data/user/0/mob.play.rflx/cache/image_cache/060353d249cb44d713a88d3af6af246249eef68ce160b4d536cd573291642286.0.tmp

MD5 104f2f9880e25db8bbae740341010eb8
SHA1 7b46bca050fcc799a4cc46e774c02cbff775c48c
SHA256 8bd5cd0697fb1217af130c5f811bc4918707313cbf02071d32dc59fdd4231d2a
SHA512 981222c4a28bb898a9952237bf418de96ec52a4197bc737147e19d338d45a4e0800132ec1db21b9381ab7fe707bc66eb1e4624d702543fff85509a7865b22679

/data/user/0/mob.play.rflx/cache/image_cache/84d05a7d3687606aa788ed08bc6bcc9beca383e2c4a33a5b77cdc894966cdfdd.0.tmp

MD5 31659312aaf7854f3eebfc0c7211c71b
SHA1 2e8d883ac9666e4ac1cf02577310ce4799dbda38
SHA256 eb52b9ec409141b136dd33874f376ed8cecc474b5a6c5f0cfdf3d5b7e0c0692d
SHA512 3933af9ed51e5437b417ee252b2eefaa9c5ddc5bd67a338793bb1aba17499a52f5bc756b47d40b2d625edb0a94666765fa87b942e51937b04530ed1548fbf9ca

/data/user/0/mob.play.rflx/cache/image_cache/0b42a656f297ba720554483047fa553ec46f7a20a172e76c5f9d8664851cfff4.0.tmp

MD5 c21bfad4c97438a7abdd356e537b7f4d
SHA1 6e7cd1a17d4af4ce829a799e2c9719e10475ff31
SHA256 fd0b5a1291bc5fef4696693a8534bf5e588425e06c7719837ac9eb6959fe197a
SHA512 450baca24841033e076e2f11a6cb110e48afd2b250f7edede2468af70b1961d692d86bdb1110d8d31cf42b6b97c309a9a149ad41307ea8de79c6b6818eeaadd2

/data/user/0/mob.play.rflx/cache/image_cache/f28d2c59cefde118c8d9e72a21fbffbd7dca1630b2a3bc43e39531b6f9c7127a.0.tmp

MD5 35eea92cebf3157c7fe261f3f9b4b66e
SHA1 1a7add530b8b86eaad372ce4a2b8e8dda9bea676
SHA256 cfa519717289622bc31e208840661dd455e5a105d692dd39e8060959a9a5bf8d
SHA512 0fe21a6b84e92bd17b9553bae0f256c006783e85aee20fbd9ae133f24707de818e7244dc85c47b35dcf4b3d1f74184efa6acc40c38ab2ca5559e9580842d00af

/data/user/0/mob.play.rflx/cache/image_cache/7bd46fb321df6937932793c03cce9b6a1d087c6456469f35157d261c825ae558.0.tmp

MD5 81dda838b4265c91ba14d565fa0cad53
SHA1 b530fb125d1add3821960edd775c575405e4b073
SHA256 a1b2100757eb613302d6296355759624db83d5f452c83422b99f9141edf2b049
SHA512 8bb666422d7eb26581db1240524fa7baaf8633981256632ebbf9bf2f4d7617b7ecdd907b8764de16296dbc62bf707c1260599b18facb9ab1c8a4b52a0be0e39d

/data/user/0/mob.play.rflx/cache/image_cache/5703b14a517e74fb94b96cdf54577420a86ebcabe229cac6fe4a872b1af5b41c.0.tmp

MD5 e69a155aa8d343368fe92b76777a9a64
SHA1 30cd827761bb170ffaf65edeaa6e92f74c8052b7
SHA256 5c4daff40a9958b9779d02dc85d3cfc35cfa8b77285c83d30b94103258558966
SHA512 51f98a94fd03bd1070ee0f2feba0b5941366dee88a66d27f258e9112dd6bab929b7a6037ec7909e2613ee7a9eed43f6675317ed4429cbeb3b179183710a664b4

/data/user/0/mob.play.rflx/files/browser_icon_dark.png

MD5 cac9a26c27728066be7a285defc0df6c
SHA1 9931d42eea7663aaec4eb901bcf279b246c19e34
SHA256 9347cbd8e6e2af4d09759e55b7595474648619da07992d6485b9756ab4d8170d
SHA512 11a3abfc4558e6c887f1f809a3837ffe6f4c1702407db945319acacaa5e677f6b117c07ca676cda6438639a1ebc447a2993e0ff31be8ef797bd219700f508ba5

/data/user/0/mob.play.rflx/cache/image_cache/0b42a656f297ba720554483047fa553ec46f7a20a172e76c5f9d8664851cfff4.1.tmp

MD5 a7ea5b62a2da63cc09ceb6fe7562f712
SHA1 423c97d6ff19bb25c8346b59cb236cffb4cbac9c
SHA256 92b5d60101e946b8a25af24db769a720a112b409981253995c870bbaea9e56a2
SHA512 882540272fbebe2ffea19c86ee23877c31a9ce5119def0f67e519e80a560a05bbf3dc65c9b8f66cc0d11ddc0d8a87b24c061c1f7b3aab7c15ad7a9a45ccf557b

/data/user/0/mob.play.rflx/cache/image_cache/060353d249cb44d713a88d3af6af246249eef68ce160b4d536cd573291642286.1.tmp

MD5 30725cedd364594dd6c61674066186ac
SHA1 57f23eb5a9e8d7c8e3de6659740b307edb51a4b6
SHA256 7fce9904398572669b2f754220c26882a45eb1e5bc6f239a544ace1968a2b35e
SHA512 e0bf28f026483cbf77347ffd1ffdebed7ee435e07a4c3186429e12d6aaac1ed9e069920593ebfa5d1e523874f3af3be82b9cda4c1b2acc042f69bd482ea08d3d

/data/user/0/mob.play.rflx/files/forward_.png

MD5 9ee047a6801bec9459a9dd5ec7068078
SHA1 1aaaffc208e2d86e53fc031e8413169850e65746
SHA256 9f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12
SHA512 8245818df5ffe06c8f369c8d77479f9f2163d10dac36b0e37c834018b713dc8b063ec1de1862fe16a8c1a769b496652be880ddd48d6fcd24ad766a395bc3ff24

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

MD5 60613793d0bce882b80f2429f3b50edb
SHA1 48b22e5a190e572e9014a10c4a4543e57f2cb332
SHA256 92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54
SHA512 81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

/data/user/0/mob.play.rflx/cache/image_cache/7bd46fb321df6937932793c03cce9b6a1d087c6456469f35157d261c825ae558.1.tmp

MD5 a66d4e08221acd9db32df4056abdd8a1
SHA1 532a02f3dc89b8d889e90eb1d8f438157966082e
SHA256 4b8e462ca6c8d3ab2c57645279a16df33c63634abb651eade694e79176d344dc
SHA512 97afcb0dc6d3643935a9a419e6abe5dfde0ca38b650a1f0cd7fec11065ad54e6a577f7bcaf6068b1ac47ea95552fda4cfb5c6ea79afc5c77607f832d238a091b

/data/user/0/mob.play.rflx/cache/image_cache/f28d2c59cefde118c8d9e72a21fbffbd7dca1630b2a3bc43e39531b6f9c7127a.1.tmp

MD5 b2f773a7de9c34a2941a469294bfc3d7
SHA1 49b5fb548eba3f32cb76454217b41311345b4b1d
SHA256 ad135b5c177e35e9ea9e23c40fbcb715dbf8450ba5336df155928e2a11bd637d
SHA512 57f034f583fc2dee46ffb22fe7073d5d72e1e0c709ffd3054bbba0cb9b1e47dda0ad7666fd493ca0bfd5186fd210c0ad12ba5855dac72588762109203bf4322f

/data/user/0/mob.play.rflx/cache/image_cache/84d05a7d3687606aa788ed08bc6bcc9beca383e2c4a33a5b77cdc894966cdfdd.1.tmp

MD5 461a4b5f9333912edcae6d8776786d51
SHA1 dc64a65077ef8e5699337d22ea2b2372818482df
SHA256 0ba0d537fb34b556fb7a914944de7c31e7e152bdc95e1d68471ca9c306009e73
SHA512 b854a52e83314edb3c8efdf03789a254d077bc6df1b5c815735e80e976feb71f72fd135931d530118810ae06503b947364125f4577249f9cbaa382510dd6d4b7

/data/user/0/mob.play.rflx/cache/image_cache/5703b14a517e74fb94b96cdf54577420a86ebcabe229cac6fe4a872b1af5b41c.1.tmp

MD5 e14d3d17d6b0f870f71aaee809490f0d
SHA1 b950298e179d42dbf258a1e1c54498632bdb1b0f
SHA256 059e96775bd051ae47b98af33798624f63fa5bf535534b6069531e59eed9805b
SHA512 a117f4877f3d5056715fa8d02794aec33201293157901bd818277379dfce327bee004c63aa338926f831a944f167c3834c43114c137b7dc3f3de13584e1c2536

/data/user/0/mob.play.rflx/files/forward_dark.png

MD5 12bfe20382337a84c0fc004a52b9ba9b
SHA1 ead15f7ef372c16f78060b8f8c5fc6e0ca6a96f9
SHA256 621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5
SHA512 7a346febc49154dd348be77f88c6e7ed5c7a531c2fed981f12c40e22a19e4e1a5c51fa766b3122898d97f05e1546a6f2a29b598b0ff441cc7de5e3c505aa33c4

/data/user/0/mob.play.rflx/files/x_dark.png

MD5 1b759349f0bf3e55c51e2a2c2802b3cf
SHA1 5a608a093fa5f513d1ba52e8a9e01f693c47da98
SHA256 59d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443
SHA512 3b39d22d0f8368dac2e36884b0316c5aba24180f51cb3a993fdefcdcfd5a36823d6c02c75863cd5a3bc0808223dcadf9934d548c433332bb9528f0eb8cecc0a6

/data/user/0/mob.play.rflx/files/empty_star.png

MD5 76ce13c6312eb334fd351e3b5cff4bf4
SHA1 203bd863b812c071ab3ae25bf4ab2f9c4d42942b
SHA256 f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8
SHA512 d06ba34786090e3b027670a17910d2e35f48eb7bc639e6da1d08214534215797dadd1a56be44422b176801e5d1a1345cd2bf29e73acb6a49bc9a2f7670710783

/data/user/0/mob.play.rflx/files/filled_star.png

MD5 317f802aacfab6282b8f74f280e841c1
SHA1 3b746a76f6322e97fd6c09a43d03ac14631d93e1
SHA256 f37f9a17c20ca3068f4f9db08c262c62b7b86544532f612a78421bdee92f4196
SHA512 a714f902ede615507cef840dcc03a5eca183c21c82cc419a924587f38b6974f5aa45fcfcc2bac4d6cf82b81d1b6ad452540e0581751bfcad72e524c83757a301

/data/user/0/mob.play.rflx/files/logo.png

MD5 45c24a8686a0978086c99f7039accc17
SHA1 c63ae2601322045390c7a4f230602b74ae18d2d8
SHA256 bc9c4aa36a0dd7efe16a8b3bca9172d970fd13d70d3e718aad17a78269079912
SHA512 d5861c64b9dc9139904c3bfc7da26fa6f3d9676a5b4203ad617c661d54d3716508fb02f282f5c204bf9d6a0c7162bbb565a44f2ceb96d825177065818b797727

/data/user/0/mob.play.rflx/files/half_star.png

MD5 a40e6a567b7aef329bda0ac200f7a23d
SHA1 2fa463649c7ba586b28670675a15e0d7a630c7e0
SHA256 ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556
SHA512 5e77ca21445a09aa903ca08c10c1bcaf769d8273368b7981aacf1bbab08cefb7a521687e78d280828f46b625c99fde02050f5c914dd4d07fd742723f7713ee4f

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 58191eadb5f6103e58bbe7529fb291a8
SHA1 93477465d6e7381275c7bae56ff85a2f4dd9c8e8
SHA256 0119ce207190b779cbffa226a32b2642bc418da70330062e9762cb470c4bfaa4
SHA512 bedad0fc7ac89092d27a7be6ff324cb0cd6a906ac317f5ab870f65374d2c8d8488b146f2c59ae4cebab33cb077e0e9ba597fc1d91268affae0b668634fbe1e4f

/data/misc/profiles/cur/0/mob.play.rflx/primary.prof

MD5 8e1f9222fb599ad3bd0609c68c453e97
SHA1 c6f1b2b173917844eee1519f85572faca81bf2d1
SHA256 d632bf8f2047d9a3278120b2f35ad5960a78f62ab8bd8b8cc04832857be39bd3
SHA512 f7656a5f4e0eb97d920c65d5a402d6efe64278ef9d3eaec835830f65723b71ef13abcdf97fb07012d5ef4c4c00c56a6e266fadf42624f5aa8bffacd39bf8bead

/data/user/0/mob.play.rflx/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 a3810bbca95bef642f01534dfd14c387
SHA1 8c80cf4d6d96611339ad41c9a62cd3f0982cc31e
SHA256 e0f616f71291cdc6fea0b3035bf285483a1b92940c1d9e7def91defc3f98aaa7
SHA512 5227f1abc482d53db9156aa2f127ca8815076f9e650b587c31554fad0ff8dbebe2be2f813b151a0e981c657da50210dd5b4618ca0930361077aa449ed6123716

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 7e6b0bc382bc83bee2531f18a58243af
SHA1 0d50744da8d3a5d5f818dfc694d1a86e397bd425
SHA256 b0b63a87432b7a3e63f22203c036adb36c4801f6de19638226107cc4bc94c68d
SHA512 955b9ea2ee1ace0917b1358cce620edce7d0e5fe0086eb98cf573fd4e261cf9938b7fd925230dd6013930892b70ad64e7930afd9c4e95481dcf5e65292b5e350

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 00e29ef01ce44023815d6e0bbdb135e7
SHA1 45fa64dcc7bbe6201fb338eb8d5baf579926c6ec
SHA256 42a2d8a509b7f7c719c1f6c168849b5961c76fdbfcb693e47e4c0749eaa1d8fc
SHA512 fd59d2bbcf1b60ec75af32e75e76b132d7e0aa5029def12eb1181368569d3b0617ed1ecbea5205c92b9ba5f6a45fe8f300c36fa3fb71bb711d372861eedf6dc4

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 27675d6f55925f806414a1f9b05c85a2
SHA1 14cda59ee7357cbd27c4dbc03b1ccbd1c5af7c8e
SHA256 f3deb507c8c268a3041316682e317cf8c035c5ce155b0e566dadbe2454167ed4
SHA512 813d0be6c4b191f560b483981494dc3ca589d76aa8bfb29a9296b3779e3db2bd0473cf38604455673f7b8c809cc690e9ea0fd308141df81ca5248e0368cb398a

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 235f1205334d20f36093d49ffa59b5a9
SHA1 9b366793841efbb8f9882b3bb108500dc01e54a8
SHA256 b719f7378a5f7f212a81dcd3530268b7d1f34d66e62e77b9edcc2a21ae83fcb8
SHA512 81e6d611763c1ef285571c7a5e37fa2443a958a3e886daab1b586609357db560371275482bf5db36a009306b8be751dbdf3a36393090497841d0537723abd683

Analysis: behavioral2

Detonation Overview

Submitted

2024-07-21 11:32

Reported

2024-07-21 11:39

Platform

android-33-x64-arm64-20240624-en

Max time kernel

201s

Max time network

328s

Command Line

mob.play.rflx

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/bin/failsafe/su N/A N/A
N/A /system/sd/xbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /data/local/su N/A N/A
N/A /data/local/bin/su N/A N/A
N/A /data/local/xbin/su N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/socket/qemud N/A N/A
N/A /dev/qemu_pipe N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

mob.play.rflx

Network

Country Destination Domain Proto
GB 142.250.200.36:443 udp
GB 142.250.200.36:443 udp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 firebase-settings.crashlytics.com udp
US 1.1.1.1:53 firebase-settings.crashlytics.col udp
US 1.1.1.1:53 configv2.unityads.unity3d.com udp
US 34.110.229.214:443 configv2.unityads.unity3d.com tcp
US 1.1.1.1:53 api.npoint.io udp
US 216.24.57.4:443 api.npoint.io tcp
US 1.1.1.1:53 infoevent.startappservice.com udp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
SG 213.35.101.181:443 infoevent.startappservice.com tcp
US 1.1.1.1:53 adsmetadata.startappservice.com udp
SG 213.35.101.181:443 adsmetadata.startappservice.com tcp
US 1.1.1.1:53 webview.unityads.unity3d.com udp
US 1.1.1.1:53 m.media-amazon.com udp
US 1.1.1.1:53 rcs-acs-tmo-us.jibe.google.com udp
US 1.1.1.1:53 i.imgur.com udp
US 216.239.36.155:443 rcs-acs-tmo-us.jibe.google.com tcp
US 151.101.1.16:443 m.media-amazon.com tcp
US 151.101.1.16:443 m.media-amazon.com tcp
US 199.232.196.193:443 i.imgur.com tcp
US 151.101.1.16:443 m.media-amazon.com tcp
GB 18.165.227.39:443 webview.unityads.unity3d.com tcp
US 1.1.1.1:53 info.startappservice.com udp
US 68.232.34.193:443 info.startappservice.com tcp
US 68.232.34.193:443 info.startappservice.com tcp
GB 216.58.204.78:443 tcp
US 216.239.32.36:443 tcp
US 1.1.1.1:53 thind.unityads.unity3d.com udp
US 34.107.172.168:443 thind.unityads.unity3d.com tcp
US 34.107.172.168:443 thind.unityads.unity3d.com tcp
US 1.1.1.1:53 auction-load.unityads.unity3d.com udp
US 34.49.168.197:443 auction-load.unityads.unity3d.com tcp
US 1.1.1.1:53 httpkafka.unityads.unity3d.com udp
US 35.244.205.3:443 httpkafka.unityads.unity3d.com tcp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
GB 142.250.187.234:443 remoteprovisioning.googleapis.com tcp
US 172.64.41.3:443 tcp
US 172.64.41.3:443 tcp
GB 172.217.169.67:443 tcp
US 172.64.41.3:443 udp
GB 172.217.169.67:443 udp
GB 142.250.200.36:443 udp
GB 216.58.204.68:443 udp
GB 142.250.200.36:443 tcp
GB 216.58.204.68:443 tcp
GB 216.58.204.68:443 tcp
GB 216.58.201.99:443 tcp
GB 142.250.180.2:443 tcp
GB 142.250.180.2:443 tcp
GB 142.250.180.2:443 tcp
GB 216.58.213.6:443 tcp
GB 172.217.16.226:443 tcp
GB 142.250.179.225:443 tcp
GB 142.250.179.225:443 tcp
GB 142.250.179.225:443 tcp
GB 142.250.179.225:443 tcp
GB 142.250.179.225:443 tcp
GB 142.250.179.225:443 tcp
GB 216.58.201.99:443 tcp

Files

/data/user/0/mob.play.rflx/files/PersistedInstallation745932113098732804tmp

MD5 bef021529fc99fddfc787b6232747728
SHA1 fe19e77a4b3a3dc92c977c7f4936f3aba7308468
SHA256 03938288615f5eb412e86c27759b6319ecc5b01d8035a664fa9516ae24e95944
SHA512 1235d7c76f830f1b12f1fe202bcade338c12af45dd0e9db4b03bf1bf5055c85bb22fa4495488b98adede5a4cc580105469d93c81d83599dc085a67c59f306af0

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 ccb74c237837ed5dcc0e493d933dd8ee
SHA1 b0ecb20bbcd5c76492b548def23ddb4d6a117e24
SHA256 71c5a0827dde931747301c20ea5fdd11953d783d79e3afc04b16efb618975a9c
SHA512 eecd4ed87e642b8b4824788d2ad294f8f33a756b7257b5f3a079c2678a27c1e7aaf7895c833a9fdf500bd2ce4b5883aac246a1a681f33f2c9a2bdb1e5b460dc3

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events

MD5 4a44d290bd46b9c9621c2cfc887c9a8e
SHA1 7c6b896b7110601390c82cffc489bb6ba5ae2719
SHA256 0d982e12f235527f2497b7c1203ecee78621c88c3cf53715eb1339d27bcf8416
SHA512 a69d5aafe2b37b9253dcd4b999b57658e7873df6c167fe229d6c87856369ad8c8406560d36d8a1c9a126595fe0d8c924190333a8645142d35ed6b47945d02b4a

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 dfd5c0771dbb4350886094b52d8c29cc
SHA1 12e16be1065cab089066ebf28a7249b0c1020d1d
SHA256 813bfd34f93b6c44e02c7d869fc5b31eefd3c056ae02f9c3886f80e964cdb9ae
SHA512 1db88bfe205baf682aeaf86e1097c3f786e9a8241f05052dd7267da104786154ae8befe27501b6f3724891c6b18fd497938d537da568a3566f25853cd7f3692e

/data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF2140179000110DCD568216C7AAF/report

MD5 4a10ff8f47c8c326fac4acfd48ccb5b0
SHA1 6fb5924e85abf23104800162c71f533b5e3a66c0
SHA256 323d642f791ab6fa99d0ea4f38956c9341d014808c5aa5ea9641bdd9d51d3ceb
SHA512 1800d3c000f3b65e48ae3733a7a8194920bfa41c1c45636ccf6316471b464d2fd1f84a4324f42b0f862f1c31610eac644d9529d58a9f25e9d5cc20a90c7404fe

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 6284173c0523be94ab73c30aa560bef8
SHA1 46efd6f66d9fc5228035de11adeb93f76ee3f494
SHA256 76204d5f3d91f4759dcbc9825015bae4804c0e6db18adeaf8fc349c4c2a331cf
SHA512 e52e91ab2555be3be0c21ebad2d491b500c7ed86243fd11544782132bcd0903ae4e7e4ab32e7ffecd8ef5c5bf6414df3797e3344996215cffb6436a0537f8f77

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 04c71ce4db0e8254f463fba9286aa829
SHA1 ec0bbd994bfab5f630374fa1c1c943a9ebd91af1
SHA256 ddaf7dc8b967b46ab84d70564c3d481caddd3a2a937d7431dd4d1f4067e322de
SHA512 81e24a4862634e4530a962b5889a5985aebc24796851dff2f07f0342b12000f02fed52ed50b6b9dab4b699cf06f93b8383228f5580dc546524c47034de7e8ffc

/data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 35b51faac8b5af3886e70bb5a885dab1
SHA1 e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256 af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA512 6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851

MD5 e8cf43864bebfa3e65bc39ddb178eb4a
SHA1 cd5f0927cd3810f79da1add1e78741251375360e
SHA256 82788e71724651d15e2da2d7bcc1decdd6be6cd31f85dc943bd5fa87a6be6b22
SHA512 90e200529ea225eeded616b6708d58536636c2ffd071a0a74a814930880bbfac0587ae2aeac06864d84fc655021d1dd15238ff3ca9b87ceace911e5d9808f907

/data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 944e6a5a08cb971370c65c06061f0ab4
SHA1 84d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256 ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512 bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 f936c483f93821d0135ce6f30f26c057
SHA1 d49469f8b69dd633874a248b216a6a06a5785d96
SHA256 5694455c7911779b08adbec41154d3993ab40550882c88ca258d1134f3959d8e
SHA512 92088f799c9b9b3b20a100b5c69ec494060ca418fb6cbea6ddd361699329eb5dc44cd6e64b6abeaafc7d70afd96a617b47e0938ef9116c9657cefb123fded7cb

/data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 ffcbf87665a36fc21782400bd0537e79
SHA1 3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256 a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA512 7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

/data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 dcf7d6c1cfd5e7b56074e3001577c78b
SHA1 b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256 ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA512 42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 85d08ce41645a90c361aff711f13f029
SHA1 985d381594fe081bb80159b6dc6b76984b7ecf75
SHA256 324951b120d9e3f602175b2c2612586ee62612715f5aa9b6a408d811e35c014c
SHA512 bd2e7cc0c3c71fe23be36d76750cff74813718ba84df5166d23815bf5ac1aa2be1540f4f2d289f2d0aa901c7fad1cb25a9b14bf253f56440c840c206bdceaa00

/data/user/0/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

MD5 a22038efa7dbbc722daf5073f8eb9c90
SHA1 3fa9b0d58603bf99f63a3f36fda9906cf5e4c671
SHA256 f6843ac8bbff316398daacf499403e758be2724ff2ae998b0124374ed5ebb6e8
SHA512 0f099533e7488fe72b4953f1065a8830f87d6904d0242dec533d2bb46fa991891d0b35f475b93658c76901c031f6ded5ac467673b5c95efbb6e3b2066c8c0251

/data/user/0/mob.play.rflx/files/PersistedInstallation4001808751041381739tmp

MD5 c12a99fae1161435f191ebe4b2697e48
SHA1 b593fe19de3e9b789df3592e0b52eceab60f945e
SHA256 b23057f0b7f83b82316f10037fbe62f24f50e8048428af509548fdb5c42a0213
SHA512 f5649c8d6ad66414899d69340b4b7b12d5a39b3feca5b1eb73c0440ab35698c79856965583a65710dcbb5cd19b897b0c0259d591ee8999f59483ca2fd2adada1

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/user/0/mob.play.rflx/files/UnityAdsStorage-public-data.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 127fe97da2b39e3747e0d534122cc518
SHA1 44072473790d5d0c23535c979ed2be13c802e136
SHA256 1ebfb834357f2a988f7e71c399b3bfc098fb82826dfe1bf08a762dc22954093b
SHA512 89da1e3e47201241e93acbbd18a4e4f7a735e2ad69328de697e2c164ec1ef2ae91b98b6dcf5f66231b0d026acc26b94fa78773029552877f02ac2e07e265a29f

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 996d4f06a4c2c3737ae02abfd261a72d
SHA1 324c48588cf5d24cd13733d5959c3fa388774d93
SHA256 0a8fac8dfd39fb123d5d88229426262fa20c2d5ec6036ef829d442a1497c1feb
SHA512 819ae28670b75116145ccb47538f8e8f04b94bf333c73cf08013dc2ffc40b399448a5f0665c961935279849f3f96f7d64de9da20c6edb5b90ee780af805c3661

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 bb0ec69ffac7716f40ddc26993abc078
SHA1 930a4775caa790db3a51b240753a15752eb9da12
SHA256 491308863485f87b4c2bdfa3a3d7324893359be016c822537db9d4b9115eae55
SHA512 e213a293af05dc669ce213efec6f857d5d5301afedddd52711999ed7134c33ea92cd22905b096db048736464902d3cb8c9c9990e6c82206ef61f935e0add654d

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 68d36fafab653933f40a722e67a0d1b2
SHA1 26803cb7b6d06f299993f005bc9b85473b82d06d
SHA256 5862c957371bf385ff1ef3969cec488b887ebf8f7116405a851b52c831d3d5e2
SHA512 7526d9b280cc86fb175206491610c7d0f1b61f666047f673f8d67831709a70c1f6c89c306c9be1a117442069488f800fd1d4045ab5700df55b57954537d1299b

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 c608c0f4edde67ff6b05db5d2f1774b6
SHA1 31479dfdfd98e5df69bceb59951feef25d23b575
SHA256 fc206a3ae64360ef4dd9985cc8ac6d7e421d92afd3e780f95208ae2da123e980
SHA512 b9e27797097439474c00548c17632c2efab1f3b2fc54d300218a50f227a903ad54408a977f8d63ff98be6787e2ab7e47153760361d5d3d20b9952dd8f4dc8102

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 1f2bb76debea42fa3e15aa81afc9c214
SHA1 12a2e29aa4e137bd5226da0dac13edc69fa90e75
SHA256 ae8db7c1bcd8032695a2d9b05a601ca743d4d045c164b6cbc29e1df7c072eab1
SHA512 a17321c1b04294f808168e36334a05ca80be471df4b5a5cb26a5f64834768feea31811de2eb432dabb75a944de43e95fa81c7141ce5e77915e2ea7564038e190

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 d550934abe49c09959e9add520bdba75
SHA1 3a03c73d9394d0c34a3ae8494be923cff43a5671
SHA256 03efac0f2b4f7c17f57cd5da140dc0a1f2aa1af737d7f3b051092e74182821f2
SHA512 34174fc1350080546810789b6d09ba65e3fd33c3e0442dc99d5c298d45b691a6a80cc0db5cdc9579c83dc0b96aec142febf0722abaa0ab0a7bfa54d8a2f50b20

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 f8b5176138d1aa38d247352225c642da
SHA1 0dc48ee2c30ee80d9d68a22ca4b68bfcf84d0f12
SHA256 05f824be7a69bf04993d5e6f435f7b7816db332b364d284e7ad3d2749739c11c
SHA512 31a7cfa6fdf5c9a1a826dd0ac84b5894a10abefc67dd40a7f40b4a205c18320fa11cbe677a6cbf8680463f8b16c488ca086b5b47099a67cea028a79c9613050a

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db-journal

MD5 df1d67c803e3821d4f2218dc01b07002
SHA1 edaa1fbcd2de8b6d65043adfc9c1ceb2b3cc28a7
SHA256 ce87aec4041e8651817ba7437d6e50c24ae6557ea3fb28434ed0c92d81441b8e
SHA512 2f2eeb4b845f9d9f0538445d0808a9752614bd275d2b7ee3bb7e858face120e7d4a7e6ffedc4bea9d4eab54ab18443671db9d935e288751c36a75a934ef1e28c

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 9fd695b42bc39960e83d6522c09984a5
SHA1 8b688a2a789eafc4b97a9f954ccf18d1e5a889d3
SHA256 a6c83d8e98b67f1766033dae863a3a05b0314ef83d44e7438e9fc1c83e785055
SHA512 916ab6960caec214ffcfa76e4af805b6ccb013326a5ba22721cc813da0d435d518cdc1a73d8948aba2735e6e7c9aec66402a3af01ba0cd2a8437666a52ce3038

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 0618046d03f9909b8a1a84e7576d1c19
SHA1 8488cded206cb3c707f958883c2f9d59d509c293
SHA256 6d3b5075e50d671089b97fa03a6b231f0ad38e88380f48f25a757f4ab720ad58
SHA512 b6b4f1eecedd80e1e91cbb6a78e7896c1e0d32473c042ce0f54c208fe7aa78bd6537282c2e1cf422b8a76b6af624368bbeb277df680dbad1a6d81f11db2cc91c

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 57d470648fc8b2cababca90c8f182cca
SHA1 63737ceeafa6a1df5a7d9aedc174a7dc8ba253ed
SHA256 f074ed1661df83981d583d6871e5efcd71cd3eba56aa42ee0e2e9e585ce68731
SHA512 7a9b919bca74bb8df1e20845ed603bfa5c30a4ba93135a39a801cd8ec9309865a2a0cb9abfa5c2fe4a5dc69ce4dd5f24b3a13c8b296cc0eff5bb65d5b0f37457

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)

MD5 d165470950d875a5ef05e52b16fa2b71
SHA1 8eea6374a2f17e04a9265785fa1c805c4c3468dd
SHA256 ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c
SHA512 41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db

/data/user/0/mob.play.rflx/cache/image_cache/journal.tmp

MD5 d6ac8c8db0504502d7f0e057a78c5ce3
SHA1 8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4
SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
SHA512 100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

/data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF2140179000110DCD568216C7AAF/userlog.tmp

MD5 c33583fae4e0b61cde1c5b9227963237
SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

/data/user/0/mob.play.rflx/files/StartappAdsMetadata

MD5 c5ec03049f2a725dbe8dff5598ea7afe
SHA1 3272e70169bcb264b8072dec2dda5c2d2f7432a1
SHA256 8d11f72942817bf46c3b47ba9e7892b70b5ccee1e01116804ac1d5b683c48840
SHA512 8d0134a29ef6c20c39e755d4d36fee2c119ae32d6f05d1d62c8ccf116756f216e8a9825a5cfdd576576d79c9bac33055b47216efea7dd4f966a14111680588c6

/data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF2140179000110DCD568216C7AAF/userlog

MD5 7f5d6832122136963c82b745135833fa
SHA1 b737ad028b7500adeff40cd20a5c73e54ed92f35
SHA256 cc6805a50b4be435d0618e2f3d86a10783e1a84300b801255a42d01df25274eb
SHA512 8a363e6b265575197822c71ab391607d86d5b31c1348a1639f38dde8810a430a61ff1655c64268747f9f0945204d5137bb62827d99db01f8bd1205514bc496c1

/data/user/0/mob.play.rflx/cache/image_cache/journal

MD5 b5c22802e61a9485c7df158167e52407
SHA1 6f9c107693f0f7c7485ef95e4eeb0bd646b4e245
SHA256 3feaf97796bd1506a97dcdf521ddbec83d806f3567a3dfdf948be198c5b17ac6
SHA512 07efd8edfedb90977b54559266619a40a99393fb283a92f8bae224cea2b7fc2a2b9acaee886fa4718e4a78dba9a5ec2de18004abdb220cef959ac97cd78dd8b0

/data/user/0/mob.play.rflx/cache/image_cache/031e60ddb99976daef347882289ffc229f3930b3f31db30a6b9a6fa36657eaa4.0.tmp

MD5 cf6e552942358b75fb4275a2bda40ffc
SHA1 6f9a6f03cd4589462f9c342b01017b9ccbdcbf7b
SHA256 0bddf5e4ffff5881b9e54d3e78c709ef8bb74c2b8ec72d8a9672c364280eb28e
SHA512 1c44a3f70e9cbd4f07315211cf91e3885c5509164acd946bcbb5294b9691cd7a333d3dd1ea483ebf08cb3751e3099b7fb4a2e58ddfd7294b7cfc81ec0529927b

/data/misc/profiles/cur/0/mob.play.rflx/primary.prof

MD5 dbd6a027ef3cc4ee78fbd4abea7c66af
SHA1 3bef2effa90bc4f7d4151cc08775877c7ec7cb86
SHA256 6683f26e622712f711f6d292fe9ee03e21050d705173aad04aeb27f90c724382
SHA512 0d5ed0459df531ed4d9f73fbb76a4130bd0039d1c855696b431f082e1f72c79374a522560f8534ec5b35d24e758e225c02a3f1d419a79877252ca58d2d8da9f8

/data/user/0/mob.play.rflx/cache/image_cache/031e60ddb99976daef347882289ffc229f3930b3f31db30a6b9a6fa36657eaa4.1.tmp

MD5 d39d98b0c06ba2a11a6d3f312cc0c4b8
SHA1 f5f26cddc069f48f15f6bcd1709bb72a230aed90
SHA256 e0441b18f153ff3e74932cd235eaeafb0da3664732dc7c841ba30b447a1c9bdb
SHA512 afc14d7674051aa5505dc8d7a752246e72d845250a2cfad0f5f23893369ed3604babb99565e80c1cd4bfc9ece707e3395b03562ef23547e64cf2edb4e8da3c0d

/data/user/0/mob.play.rflx/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

MD5 63387ca475f002563e2bb91b829324d4
SHA1 9ef9a07fa1fc2f7fb547077ce30c714386b550a0
SHA256 587e812efba124d29941be0312c65e6ff7baaf3bcc745c286e622886b580c931
SHA512 a4550b4519e0c675c6fb33e009e243321a455141c86c1b00798c5c2d692151b91a2d466de109bc3e72d3ec8ee984f56f6e1e9bcb885bc6b00355f90a4f7ddf78

/data/user/0/mob.play.rflx/files/profileInstalled

MD5 2be7c61bca24a02ccc09d04fee7701cd
SHA1 8e36195a7e80d558dfa2d921fbce03b2d94f98c8
SHA256 b453915b4ba7d33a790830517c4730da3866406f57d2dd89bbdf25af8697bbcd
SHA512 83a7eebc8f6ac679892c9293de24d1f23fc1988b2292d16a4f0b9f69f18578938756f9c930fcc1998eeb597924c9606e2eafc503de955cef4326a64cd5e81547

/data/user/0/mob.play.rflx/files/StartappBannerMetadata

MD5 1464bff0fd2bc323b44f3019e32e43e5
SHA1 e723343e3d4bd22bab0510ab4d1233e346b4a838
SHA256 5225c5f27e665aa4efe233d9efa63a60e7a62171ed33c1667cbb5bf6b92e44a3
SHA512 dcfde2c757c5b83ed0060792c6900f1e2614410a2441563d2bdbadfc24326f73f2fa0fa7f2b7bd4555aa2a2b03c15e0ac3d28ad4836e0fda5484f00f8f2eac01

/data/user/0/mob.play.rflx/cache/image_cache/b18c11d49d0895e2bc4842b731215379019ed695051ce57461b43502e1cc453f.0.tmp

MD5 e8d00e15598e6891d83276bb3ca4177f
SHA1 411b65e4f08e556a0799e674660a75c8de2b3ba0
SHA256 4d87ef687ebff3a53d043ded39b8cd2947665fd67f4067e4edcd7f26c0244b27
SHA512 3bd60693f1e5b43192911c61f9dd2bd0e60045787c278bcfda7b85a4d655691dde6a26afc9b33ae16f8c33a1d4d5ca1a0e8e25adc926f1029639ed82c6dd67fb

/data/user/0/mob.play.rflx/cache/image_cache/3662a34f6140ee367d3fabc2b627ca2e5f9f179ea0a18554bcf3fe6f9f6c9271.0.tmp

MD5 bc536849198833eacc4d46901f57edb3
SHA1 49ff051eb9cc3f4de307b3bc18c992b90468ee2e
SHA256 2f701ace518bb63c782d3600a7b4f38ce2ff7cc78537890bcf582d72505cddfa
SHA512 d7ce74e97a2d02d3cba2bf189d57c7bbc377b1096618fe550ce7ed36585af03dfa80576b4e4e77f0bb3d9b316438a24fc4ea4fc7a8d1099ee82e73b741df887f

/data/user/0/mob.play.rflx/files/StartappSplashMetadata

MD5 84d44d07ee0cd574f5c73907b7a6055e
SHA1 19c7bb2bdf7f98e4ec69bbbd94981fd6ef8966c6
SHA256 e0a6705cbbe7af1c15e10c45b471bfff79dada9044f17fb7226c8fb6460f7ca2
SHA512 d8ecf9b58cb4aa25d14be75bdbd5c941dd5ecc98b85edd26110f93da78b552d3264b5458ae1e26a489f66e0d4771dc147d8afc73b6532a795e6457e27aa27947

/data/user/0/mob.play.rflx/cache/image_cache/0bae8471c7bdf49e5298a41e35f5c841a04ff4e2df9095bf4187c4a70e21f452.0.tmp

MD5 7fce00cce456ccb215088043727afd52
SHA1 26c2e95aa1c37c2622d7fcac6d35283baabe1db7
SHA256 df359011344af9006eff4a3ad640cde3c28ea34f9e5792b6d0a00d9147e4cc8e
SHA512 45b420be28fde7631ce52c47cacb7d7954bc22016645f510a1e42ba52d3fcc207d450fba76dcc2f46091fe288c5a5bf59d8fa58f6cdab6bc622d3d942d50faae

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

MD5 60613793d0bce882b80f2429f3b50edb
SHA1 48b22e5a190e572e9014a10c4a4543e57f2cb332
SHA256 92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54
SHA512 81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

/data/user/0/mob.play.rflx/cache/image_cache/3662a34f6140ee367d3fabc2b627ca2e5f9f179ea0a18554bcf3fe6f9f6c9271.1.tmp

MD5 2fee231df7e88cd6878dc1ca28192bd7
SHA1 187e3a6cefd3c360e42cab97bff7ab54943126ca
SHA256 757673dbfa7900eeb2395d2495d9a25e0275d4fe46aa3bf32f4f3290fe69c01b
SHA512 dc5f59b18620641337910570e1202911d3b6446afae4b0887f6c740d8d93b591975e77ee2a6d77b9163dbf674faf4603f13148e74fdd202dc8cd794e3f4f56b3

/data/user/0/mob.play.rflx/files/StartappCacheMetadata

MD5 c41164d8f5044093acc85a4f93b1ca1b
SHA1 2001e355baa615da01da5bb8b60c88f64d0e57ff
SHA256 5e478ae54831bad55c4dcda78db4fa071411c98ddf9d057ff557a36b1cd9c3e4
SHA512 3812f2c85d4e24df3e68b0912a2dab1d1fff198ae0cd8c238e925239b19a084cbf2d58831bf5897ce764029f28bbe515b98acfb940ce985280beb9cf6251c57d

/data/user/0/mob.play.rflx/cache/image_cache/b18c11d49d0895e2bc4842b731215379019ed695051ce57461b43502e1cc453f.1.tmp

MD5 a2bbe565cc172511046007aa0db9b02d
SHA1 e64293d6ae6633e02f79618ab35d2eb7b269883a
SHA256 8da644a688e5aadbe2a44a727634ed93d63a5c6b9a174349700cd2c6eed8eaf1
SHA512 d1772927d5b9e59ceadbf8fd005766bfdd000cccafe7b0d7d5da3101ca337c6c30f06f290707df251f8b0c108f8cc27094540adbe7b92d58620c3a2eb06002d1

/data/user/0/mob.play.rflx/cache/image_cache/0bae8471c7bdf49e5298a41e35f5c841a04ff4e2df9095bf4187c4a70e21f452.1.tmp

MD5 bf2b21ddd87123d5cc6a628a32274365
SHA1 9adbaf9e1664803578062d18f2b80c846f3dc0b0
SHA256 0ac60f93617452fd3b0fbbaddc9abb0cc56bebd08ba23b70fb20834a8136dcad
SHA512 ef3acf5a4a1c981ca2fae3e02d3266ac18ee08133693d0fc505c81f5a2f664aba1e7cb3aaf7ff207dac065f1e8b5f8a7f214a079ab8d3a086a99d10d96d9dfea

/data/user/0/mob.play.rflx/files/StartappAdInfoMetadata

MD5 9de290e93742c086fb39a6776a91b8e9
SHA1 963c23548feaacaec1c39eadccc86ca3ad3d0fa7
SHA256 bdad98e288f6f34d98112184516b77b8cb67f4ff15f44454b465f8a8571f6680
SHA512 85a1f99fd6c5fb4ffe91400b1d0f1fb480b7924b08372a0b2fa8d0f890ebfbf4ef437d1938a4b2bae8425ddf70c67969a7fe92b39360113cd7e4c16d56812172

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 53a948295c1753505cd8f7f49710b5ae
SHA1 e398efd05632f3112d0bbeb2180d49ac11811fcb
SHA256 90ff007ded1d6969c0e0db8d7226d74979e3a7c8a946d59b21b13633a8375adf
SHA512 5b7376885d9f7de04255b315754d2bea679e68b10cac2035fce6621b5fea8737234be16d5c1ef07fa2284cc6cb414241dca4d60d3e394fbd26cb84115f4b3bfd

/data/user/0/mob.play.rflx/files/back_.png

MD5 f133b06147d3a62e6e7694a7cb9f9882
SHA1 16aeb42895bc494690dae7b839ee16e13ac9364a
SHA256 b92364b82cdc70e842fe6b11297cc3d3d0e93a348bde284e1b323c80e677a299
SHA512 d8f895ce05febfa4fc4d12184ee4c64b3369655efcd07adf5b5473a1040f163fb016173de08e186e94a1484d9f27d2e02b5b6df996037cd24fb309206abcd960

/data/user/0/mob.play.rflx/files/close_button.png

MD5 2d858e8af5d9426fe061df5c82ffa6ff
SHA1 bc1b2eab876aa221b6449d11e482de24b777d58f
SHA256 73d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835
SHA512 aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c

/data/user/0/mob.play.rflx/files/browser_icon_dark.png

MD5 935454787d07b55a0bf196d23a3d07fa
SHA1 ef94b3ff30de349f177c55c1ac7fb4ba962ed281
SHA256 62e8f7f85bbeb88d346807f2446524c8ae1779afd61ee23e5ff6f865a5bb7a20
SHA512 3783566f7df41eff2862cbac6d132707e352c9ac76bfa8a14b5551f6a824af84e726e20307fa5f95b9f1ee1388300ce70ad3a55202aff75eaf1cc418370d18e5

/data/user/0/mob.play.rflx/files/back_dark.png

MD5 465c157abf1e96bac94e1106b07a4df8
SHA1 a526c26fdec2d0fcf7a9f5a3a40e848ff8ecb885
SHA256 e6072121a50f2be4073367f5cb2f7cde4ec63894891271016427e9ceee42fbd8
SHA512 e1de528bf4af3de0660f7b8f2673e4877e58b9d764d2798886967fa4ecad73916385ce73523b33025952cfc9f18f678ba3ab05ead40131aa7e37a3ba4b6be0e2

/data/user/0/mob.play.rflx/files/forward_.png

MD5 9ee047a6801bec9459a9dd5ec7068078
SHA1 1aaaffc208e2d86e53fc031e8413169850e65746
SHA256 9f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12
SHA512 8245818df5ffe06c8f369c8d77479f9f2163d10dac36b0e37c834018b713dc8b063ec1de1862fe16a8c1a769b496652be880ddd48d6fcd24ad766a395bc3ff24

/data/user/0/mob.play.rflx/files/forward_dark.png

MD5 12bfe20382337a84c0fc004a52b9ba9b
SHA1 ead15f7ef372c16f78060b8f8c5fc6e0ca6a96f9
SHA256 621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5
SHA512 7a346febc49154dd348be77f88c6e7ed5c7a531c2fed981f12c40e22a19e4e1a5c51fa766b3122898d97f05e1546a6f2a29b598b0ff441cc7de5e3c505aa33c4

/data/user/0/mob.play.rflx/files/x_dark.png

MD5 1b759349f0bf3e55c51e2a2c2802b3cf
SHA1 5a608a093fa5f513d1ba52e8a9e01f693c47da98
SHA256 59d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443
SHA512 3b39d22d0f8368dac2e36884b0316c5aba24180f51cb3a993fdefcdcfd5a36823d6c02c75863cd5a3bc0808223dcadf9934d548c433332bb9528f0eb8cecc0a6

/data/user/0/mob.play.rflx/files/empty_star.png

MD5 76ce13c6312eb334fd351e3b5cff4bf4
SHA1 203bd863b812c071ab3ae25bf4ab2f9c4d42942b
SHA256 f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8
SHA512 d06ba34786090e3b027670a17910d2e35f48eb7bc639e6da1d08214534215797dadd1a56be44422b176801e5d1a1345cd2bf29e73acb6a49bc9a2f7670710783

/data/user/0/mob.play.rflx/files/filled_star.png

MD5 9db1f35e41f85aad692b8cabf46526a4
SHA1 18c91529430ea98ec6874a39811554dbf9caa6a9
SHA256 61550b17a9d3cd07bedefc4ee59c88b426a138151bac40802cfc512fd2642a36
SHA512 785b85c34cecb010e62b8643738d82c26b4d2c07092e3da8e8775ac1c10044a09ac7e1ac5f1cc01ab2c566bc2150aa406ddce87d91685a7d712cfe3236078d22

/data/user/0/mob.play.rflx/files/half_star.png

MD5 a40e6a567b7aef329bda0ac200f7a23d
SHA1 2fa463649c7ba586b28670675a15e0d7a630c7e0
SHA256 ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556
SHA512 5e77ca21445a09aa903ca08c10c1bcaf769d8273368b7981aacf1bbab08cefb7a521687e78d280828f46b625c99fde02050f5c914dd4d07fd742723f7713ee4f

/data/user/0/mob.play.rflx/files/logo.png

MD5 515c02d5e8e7f90a61ee1bdc68b6ebf1
SHA1 e55704189d65197fe05a9b4a23b4485cf3821ab8
SHA256 cadcf1170b3525a41737faf72b9c2fbf3282a5c4a8cd341518512177e5b3d36d
SHA512 7d27ed2cfb09bafea7a1b4145157c8920c631a332eeb1380ce1174676b9b119c3bfd928c344aa53c5da763cfb79403a4519354e5bd3df99356db4a3bfda340b6

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 3780b2e1c77271dd07b873fd2d1a645e
SHA1 5ae7f4cadb3d0f0a4645059a84fa1ee24a01f888
SHA256 ea6c1193705e2040c01075dbc312016e061057bf8224787092c6c191de737300
SHA512 88d94d8e31022b9d8002108527bea3eff9bd58e2a9fbd24bda07636d15fc7699d08f57c0072a5e70a3b91e65d0e9c1c8b597ee8d5707449395f9236e41404ee9

/data/user/0/mob.play.rflx/databases/google_app_measurement_local.db

MD5 de37948cc6d377da51619a75b94ce6f9
SHA1 c4a1c2645ac30c5e113eb6b4ea2f6754feaf12ba
SHA256 6e61aa9c8dcc4f1d5e9e48755202261efe29c9eb150609d4b33f3b825f0b674f
SHA512 01470ed396483872caed3d9f7b11314be807f9783de09b5cb83f832e1fed2a1e9253a45b24fa55cb8b6f39036a004132018be592b74f8bdde5bcad95a230ab1d

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 c0a5f593a850470d8d6248db6b45c23b
SHA1 b3c5aeaf162920628480cc11539c09db929c54d3
SHA256 9e09a2b3877839ac4c8205efa92f15df3703347681be767e120698dc8868a6fb
SHA512 c9564c103264c9b67a358d517e5f5148c90b53575fbff5fc5c2ead004d00f1dda691e000effc10b13bad77d2a363a55fe0ba4ac5f4c54f8c267d9abb0c372803

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 0f12e5ae993585091acfb5395ee7b33b
SHA1 2633df3844c8dc73879cb7ea5324101f1f4f5f03
SHA256 bf85382dcd1ac3054105b3dca5b69ddd9e94319dca7ab5af221422e225eb92c1
SHA512 b2e68ea166eb5fa96ccf29fdbe500f437894417ac90e5007d8f4c4860dc16a48d731dd0362cf4424233fc41d7c4a491c8518e9ca012f5761656d25f94f966fe1

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 cf8e8aa93ac8ea8fb8486fc539f54507
SHA1 137d6c1a6223700f49549ae91e589246e5764253
SHA256 fcd13196b9eeed14297d5ffb98b3d93cc6af54cdc980fb29c6e5160c0fff7a55
SHA512 eebf275528379a39c300401d60163eee632c39fca786565d8be3e1a18afbc81e5e34bd1307b17edb0dd97733a4afcb7377833527b00e33a5e7ab42c52a91abc6

/data/misc/profiles/cur/0/mob.play.rflx/primary.prof

MD5 0f4b00e8e42ad31db94ad7fdd6cbf8c9
SHA1 f99a299434b73772b65d86de76e81c235f398920
SHA256 834e399cdce44ef8f1b7c7c95ff5013c8f3c6ab79934c458ce62ba89f609cd71
SHA512 113faa9c5059f80c3b5b1ae3b024be500e57baff785294550954ecaf3964eb07c073edbe678428f0527b987b440eec9be08b220baabf2d2f703c3a488581c7f8