Analysis

  • max time kernel
    86s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    21-07-2024 11:41

General

  • Target

    5f80dd7fccff6e15d5eda6e0e8263d9f985462155d23f335baaa0a44ea7f5712.apk

  • Size

    6.5MB

  • MD5

    ac1b77d65246799e91fbbaf7c6a9cce9

  • SHA1

    c9b3c027566da411e66942af9a575893ffd41f5c

  • SHA256

    5f80dd7fccff6e15d5eda6e0e8263d9f985462155d23f335baaa0a44ea7f5712

  • SHA512

    f4a832849613f95b6cfceadceab792fd0022a7f925261ca950e963be41103d1bde93bb6c0298de7f13038b2c2f677c986a1637807bea1c27276292a02aba1089

  • SSDEEP

    98304:UUg7Gu5IfRSnPueFuaSMgg6MKRbV+pui2rmyOVLSFivt+OCvibZ+9Uy:ZeGIIteIcx6lbQpuiodMkiViZ

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • mob.play.rflx
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu pipes.
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4244

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/mob.play.rflx/cache/image_cache/0631c52cc80be41bb7a2b5000c18a63ed5ee588b497f25a4ecc5c457e9b5cc76.0.tmp

    Filesize

    829B

    MD5

    0e44ab502347cd6860ea57915f71154e

    SHA1

    a55724906ced449fc37e54f7be15367825f004bb

    SHA256

    ea3a8a7d0d9245205b7bb92d524fb62b9fc89292a60f944a0b9ccdc7cc08b18c

    SHA512

    da2c2c8408a81f04b98b6c75b99709a93aed527150b359377712abd2c48e80c826cd1f4a9a38694e35f05235195c9e350a7e87e566ed3ec60d20618c34db0458

  • /data/data/mob.play.rflx/cache/image_cache/0631c52cc80be41bb7a2b5000c18a63ed5ee588b497f25a4ecc5c457e9b5cc76.1.tmp

    Filesize

    518KB

    MD5

    61b254c88b0bfaf95b7466e1f9c1d5ed

    SHA1

    518c9a33c2124ef01f7f9806c7d097997ea844c7

    SHA256

    59e5c02555ab3e2d0680fc66897fbee9f911863f8187753aaadcc40b211c3337

    SHA512

    9f3e177dc50756308649867fd2d2b155d25450534e539e6189ca573a60c6d53c02fc82f19976f88a9836522d5f2d79e35b5c3b57f7e1afdccbabfd95eb35efed

  • /data/data/mob.play.rflx/cache/image_cache/6aeae7ce4c302f286ee4db30d2a576f01443d3f5221091717edd4887e51f65b9.0.tmp

    Filesize

    829B

    MD5

    6cb236bdd4fc367079ab8c935b6a5c03

    SHA1

    497afbefc3e2da1b6c54720731f3cc76217ad13e

    SHA256

    9b9a0e7f17e0cf7f4ec6d064b7a079bef464b02077741d735c09820d4c35796c

    SHA512

    2ea3dc7ee81ec85dde7195b55be7862d421742b25d96b5bba300c91afb1c51e2b74fadf30017e8984a96af85d561177620633bd306fa7ebf47af58e6b920b09e

  • /data/data/mob.play.rflx/cache/image_cache/6aeae7ce4c302f286ee4db30d2a576f01443d3f5221091717edd4887e51f65b9.1.tmp

    Filesize

    601KB

    MD5

    81a9125ee296d8e00e7964c0676c7a34

    SHA1

    25dc58b095b39c5bcc6897988999c2e9aa7fce6f

    SHA256

    94bf1fc36e2d7fb7db20d5b207131d8b0ba9f781ccc58e7e73e5735229822142

    SHA512

    1540a3bd7647caa78051e7235313749dbd6fddbe80cbe0b68f9f4145c8e7ad44aed42e018d62cd6724e083a03da371fd441a1c2f163b5bc8b86ff79af30f051f

  • /data/data/mob.play.rflx/cache/image_cache/960548dd38d1fb7efed33491e8374ddaaa25e77bdeb19c92e8fd6cd4efa5d25e.0.tmp

    Filesize

    765B

    MD5

    b062371d70d94204e2dd132c51419c5c

    SHA1

    59750bafa5a809e30aa160d1775dc3f826e609e9

    SHA256

    9dcb36376e58862c6acc208909c7fec4cc22324af69fb94d854b22262e28fabe

    SHA512

    4f47fc640cc2b995a658c2e3c858f08207f350556bbc7982c2d9b15057e640e00e130165f4ebebe6b000f815b02473e2829a9baec73be8932b3d0085294ca0fc

  • /data/data/mob.play.rflx/cache/image_cache/960548dd38d1fb7efed33491e8374ddaaa25e77bdeb19c92e8fd6cd4efa5d25e.1.tmp

    Filesize

    923KB

    MD5

    9ff295239bab3308657b0d5f17673b8f

    SHA1

    a4dda42677bd31253aa4c6307601c83d65847b3a

    SHA256

    efd50d627d6b634ab04203912f60335a3f11b57a9fe5bece1bee9ea12bfa2c34

    SHA512

    a21a09eb9321c4c19157e7f49e93b6da53ddb0c658e3a48fcdb84b4ca9ca2167bd075cf4e6865bd85f2e4e378d3507a049376a2316808e7f1b34b35c2a0564c1

  • /data/data/mob.play.rflx/cache/image_cache/b4357f191eb2113e24c3ba57eee0c82c665d9ba9ecaf690c4b9cc818c99456c7.0.tmp

    Filesize

    829B

    MD5

    f7889703b853d9404a498f0a66584a72

    SHA1

    b1847d4854a4db6eece1a114dea0bf04b725d3d6

    SHA256

    c6c87cfdb67041a932dbcf47ccc47c04e20c7afa450c6f631bc44cde19f722a7

    SHA512

    ada9d85f935ae4fb0d603f57a826922e423fed3961c9075e1beaccfd8546c212a5eeb4c85654a6a812476f299a75aca3157505ff1434df83919ad02b66e83a11

  • /data/data/mob.play.rflx/cache/image_cache/b4357f191eb2113e24c3ba57eee0c82c665d9ba9ecaf690c4b9cc818c99456c7.1.tmp

    Filesize

    117KB

    MD5

    8009da1d0a5714c499a604412408c630

    SHA1

    76037bca5c34d8c414109ea2383b4be50df5a317

    SHA256

    d1d31dcdb835738a46d7391594bc66eee0c8e27061c053e4644c3d25d78f629f

    SHA512

    bfb6bded0e8ad3474379a296c0123217de19291fb99227a16f2363598127b21c6a665e5ab8878a2a0b3d995b5509a4ad78e83e1710270375c993dd4a3013c234

  • /data/data/mob.play.rflx/cache/image_cache/c2db154e9c5dc9e3865fe230279f47c5a5927f9011591ad2dab2f4aba6ebb8ae.0.tmp

    Filesize

    694B

    MD5

    33fdc135b997e93edb82b58b4a3b17d9

    SHA1

    88ea830893fe0df82c48b215cac5362962075d36

    SHA256

    6692fa030d57cc67968c541bb4d6f97dcee0e73bf0b306bce3517ec2b7167f0c

    SHA512

    b67bc0142cfd02c7dff7f53ec2f65b3406559e69e59bef46fdd5c1e670a3e96e202fe46461f994868f10fd2408f53ff2aca764a85e28afdb5c650f0aa5bef157

  • /data/data/mob.play.rflx/cache/image_cache/c2db154e9c5dc9e3865fe230279f47c5a5927f9011591ad2dab2f4aba6ebb8ae.1.tmp

    Filesize

    18KB

    MD5

    5e7fe455fbcf15e641f29f91c57d302c

    SHA1

    e35f3a2af1d28a8e0c85bd1160909b86c4f50b15

    SHA256

    a8a7a539f4365a950b9ad1a81fcc2d1b3d7c73ac7a0587a1e7a5da4cdec4b015

    SHA512

    4195c21b7eabeb0677585342f7ead8ac2abef7c71181f7e9d51297b5f5ab6b70f4c8b9aa5f3ea23848a87fb43f896fd804926e8b5ced30c977e70aac1404b81d

  • /data/data/mob.play.rflx/cache/image_cache/cd48320395cc4b383d8b1dbf39da61cc33acbb8508ee39b878a41ad85363e67c.0.tmp

    Filesize

    861B

    MD5

    ca9d62689a82c55f86423d8bb027c583

    SHA1

    c85c74591e0fa1d13e9a46c644800a10e7405517

    SHA256

    0a663549aa383c190ef4763394a180cb7333196e1d456cfcc86f638a4b69c5c6

    SHA512

    e26b77c02f9705f806f9776253173026b82ed05a9a67b82c2116c35ea70744250f8de5770b868603224bb5a0962b5ad825a9476b8f62057695ca9a089b6a0ddc

  • /data/data/mob.play.rflx/cache/image_cache/cd48320395cc4b383d8b1dbf39da61cc33acbb8508ee39b878a41ad85363e67c.1.tmp

    Filesize

    164KB

    MD5

    309c949338ffd39a1a040279d48dc769

    SHA1

    7e0bdbc4f418f28343a836470159e67896cfd3b8

    SHA256

    b8392328bc9b4ade69cc48feef07d8713135e1ce88041d6427b363214c2e8d20

    SHA512

    0b7d755ce5606e84336e45ccd7a40a32de875f773354fdc3ed6909d9f78c993d22e2511ce8e86caf8eb1c4f6da79125abfbadd5591ab7499c701d34929ea6936

  • /data/data/mob.play.rflx/cache/image_cache/journal

    Filesize

    1KB

    MD5

    6f2e1d49c06d4fa3c6c95abd5b003f34

    SHA1

    bf2016657bb96cca4c050ae8e4de5a82139676c9

    SHA256

    43a540a9c11bc7a46a6e741c0a42392895d715942bbeb89e1a136ddd8155dec6

    SHA512

    04d1ccc77a7706b42c969d5b97165a79f7d5648b2585c0825ac701b6d5191a234d8aeacd79ebc86decf1cd335a914f67eee4da91867e98795e3e8036f3342b14

  • /data/data/mob.play.rflx/cache/image_cache/journal.tmp

    Filesize

    31B

    MD5

    d6ac8c8db0504502d7f0e057a78c5ce3

    SHA1

    8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4

    SHA256

    8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a

    SHA512

    100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

  • /data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    512B

    MD5

    d98acf73268ab1cd60a45f3e8311b443

    SHA1

    a44d01aa169f9b84f9cbc73a227fbd89704f4242

    SHA256

    4e52522598993571af547e343bb120e4ca1a1c86765f0c85f53d90360c79f7f5

    SHA512

    5a7c8f2f49d20566f75b4d24ed4456d457fd5a425ff2dd3d44c3a39210fd96d6a11ea9535689c3cd8f4c9ba823434c55b1a956265d7c4de1bbc94508c04c0664

  • /data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851-wal

    Filesize

    52KB

    MD5

    e531e56295f09caa5c84f7e628861ef4

    SHA1

    754fdfcbffeac94425fbbd494a3f044378ecf8fa

    SHA256

    4aba2485304991b9df0cc52d49fdcb28f338e41be9ecd579eaabc55c5d090d9b

    SHA512

    c9cf36be687c20951b48e95997bac03fe9efe6091c47cb1d8e55ce6ec2f678528c6d55fe2f2a426b40f26ab808245064ffc8aa51c85e56b5cca9ed3251233ba9

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    0167eaa01ec3613155d001b0d6b01c0e

    SHA1

    842951f621da71db197418b95e7c4c75957fe3ad

    SHA256

    d4ff8e1af017e16cf812f5b4f388a0937372e5c26798188f79c4f9e6f76ea0df

    SHA512

    6a288e023568441c39e0a1dd1f8696eda5de7171e25eb02d5d3bc409b13fe3205c3829f998cb5b9083dfdb35d2ef8ac812f6eee1c2b36fab4c40214771e46823

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/mob.play.rflx/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    9c7a12faa9ff2c7457d5c660d0d03955

    SHA1

    023c834faf04af54672864651d933b57435bea25

    SHA256

    c677ffee854103145e86f1fb9d29e2913939e6d3aa54a3f92a0a72e76c154cfc

    SHA512

    fe545f61bffb50c8f525a7d183ee30494d6af45dfefaeff968e746749ae5b8ff350432699fe78c05e62f3e481367ab3b042b435304bc7fdc6d198d191d8f4f9a

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7237409e0640cfab7bdbd429bf821a3b

    SHA1

    4c3da934842f8d4835dfe2a9c275a300e5123309

    SHA256

    5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

    SHA512

    c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    6c98396f104bb64885a514e268eaf6c1

    SHA1

    3d446e4c8ac9fd0c65a25209f4dc5a7c0f099cd6

    SHA256

    c1eced97f992d1e56771ee7909d75ef545e2c06b088716510bd91d21e94418e9

    SHA512

    1194b43615e1bf52bbfb7f68030b87367cc1959f5bc521f041e684d1d96127650435ddd4143299f8320cd42080fbaf5e68ed55bbfdc024212733c346a7fc3ebe

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    10eeb9241203bc62423423dd1ca6eed6

    SHA1

    520ea66d85645f3b3ce4775dac213882b9adb9e9

    SHA256

    3aa21bc0e8b518feff274cfd2023f0e178d13d7fa3dbdab43d16ad7acbd22cd6

    SHA512

    9832552c2fb5186688b927011794a537c4838c050a3f48f57e40898022d7338106a19b24c14779c3878adaa9f6a439e48d43e4237c0d80f55f250ebc9b16c0bc

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    8063483dd8256a196090722ea8f94902

    SHA1

    4a120178c9be414ea5d08f0543bdfc2da390df97

    SHA256

    ff02a9bdfeb4e6d8447df1ca6f40ecc7bdc62c0fee2861f744c21e560e49a3cc

    SHA512

    acc68e920ef1cbddcc691717220aa5378df42e6f3db050620af0b3ee9cc869a290db65352f7e1fb09651fcc95040ed7585034d65358d1f7907479fd02db7c859

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d54ea409dd8d37334b9daced039bfef3

    SHA1

    819088d53c3663c808258d472a1a2b31f3248851

    SHA256

    10efc55e53521fc17046238ead196983bbc2d531c124fcc506108f245af388f0

    SHA512

    4e01c600ee0100452f9016c37e5c8d1032ba5e7d9e30e41f7ee8302e7aadb071737396bef9a225545c05a27fae6c6759b6936032d29479e4657d9bd3a840f70e

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a1a24b47ce4a58a49c982a81ff846289

    SHA1

    69faac036ef0f29b0c4c0e89f1bfcb8357b60cb4

    SHA256

    2f0a99ba8d927ef83d9e653ad169cee72ae639b0e002394a8e45119206f2f4d2

    SHA512

    708a5abcb4d908d2842a028b76aa1eabf66a6114ccd580667198fec6c07444c7665ed257ceda7937f124e1c8f81325d89647783398e9ce3655f01018ae75f3ec

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    a0ee0346e964eafdd891d566dd7f7fee

    SHA1

    8eed4ec7b2fc07c310cc25fff243b78f400812bd

    SHA256

    96be54b2a36fa369f9200fc3ef62d82d9776db17266cb20eae404aaa9c9ce1ef

    SHA512

    541b3297b05bd803a6f29d59dc1a1b434aa2c6b035c83d5574144d37f9fba5794a6e3a810b34c92134c2ea877606dd68e01691d2b447433469967e0aa201f56d

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    5f2c2612d285c7555473e03a1fbb8cf3

    SHA1

    02174ecf2f11c42038316c6cd85efab24578021c

    SHA256

    8035b07ed4efafb0f6f6738620ccd901d5514447d6dba7346a0ea276d331766c

    SHA512

    ccc94a45bfffd6aa9074e6cc72144a2aad2468301acdb75f706d317bb0d676494d4760183f90248079317bc0ff429e4454b2d748178ac99c719262734318b1d8

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    dfabf42b00197ee8e3a2cc6289810cd8

    SHA1

    9dadef3401f921403bf681ba5d5c7c1d750d45a3

    SHA256

    1cc7d350bc1b6b39c3eb112b858de16fa8c66f2e02915023194b0d90a7908895

    SHA512

    7fc97f1a2a4fe623d591637deab48471d307e38c06e23c4cf42e957b0f0835ebdbf19cdede92bf89d2fc7a3848e871744a7dce5138c30b2b6e000cd6ef168ebe

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    94cca532847bad76dc53a5ef20db85fe

    SHA1

    b43da68452ba1392a1157d6c393bdd78e9f2dbad

    SHA256

    98e1f44a991c7949102e1ef9fc1663edb6c227af0019971d097ace5b4d04c848

    SHA512

    beb48c58c953e27dfb483c31cd2a7ffd5fb632881c7b74cfd595b2b097c3deaa90efe60d600c4bde08877ab35a60a262e687ee2df578dfc36f899a7853cc6866

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    4f81837ba26c3a75ebe1e6e1c03078dc

    SHA1

    c722524f5f31b78ccfa0fc0bb811c7090778c3d8

    SHA256

    b4472cfd6ed4408bd26aa87cb84efd74b838f294c1ad9c33882926c2b58e1bf9

    SHA512

    b7f26611033d79b706b5b447e3073871663213fc07a807b57dd90f1b160ceb6902e8ebd0ace0aa2f1c26e0c682504322ec0ff0ede408ca5e7a2a665f7dc9fa85

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    8dc51460616239cf4647089d1262f7f4

    SHA1

    c2ec315b403abbe6a4015f44f0b578f89d9b6af3

    SHA256

    1b90f055a6a3446b3bbfd1f7c17e9f792df930e910ecafc92ac4321f72111306

    SHA512

    bde36a075fa94b205b7b1ea1b0265d3f981152a09bc767edab1706d019a460f18749a88c35e06b77e47f36c869d8cffe4fd8b3e5dce749717e0f8665424e6649

  • /data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    45fa674ef769a86bc38685238be35585

    SHA1

    ae71c8bbf4fcf452945cb8b6761c2510c9bae466

    SHA256

    4c1649a4be8e566da1fbd55a3eada4a17e0a1378b25c701eb8b6007f284ea37f

    SHA512

    7c16af890e0f9f020db48d23473571123a3712aeec7e04f0cb82fcde5ebf4dcbf060b271bdaee94bbfca3168864f97a7f99ddf942e886f90e2afba1181b91449

  • /data/data/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF40D037700011094638E5591CB7E/report

    Filesize

    786B

    MD5

    3e08b123382d4e92c11a582ab0e539bc

    SHA1

    8c1e1ade0ba99335635a7c5198acbcca8e119493

    SHA256

    45b9c7a9799aae911c9a8a0da4083a9b719c3705fb6773ec0bcd08617efa8b59

    SHA512

    919463dffb73892308526be807e2ede7481ee6f866313b9b98f8142ac9a5094146f50c43a02a898d11658d12413511a772e8a8273e345910684a923c28a22b8a

  • /data/data/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF40D037700011094638E5591CB7E/userlog

    Filesize

    185B

    MD5

    74aebbf5de1fc8950baa7d374ed3ae8f

    SHA1

    c83bf354a208ad890482ab44f8d3d4d26075ba2f

    SHA256

    93a5236a6601a8957eb1079baf1a10a959f2dbe255deb0be1ae397bdad95433b

    SHA512

    e58318bf659d00ec8f786ebaf9ac696db11bc8edf38088eb2f89cceef8c2dfe4c5da31dd8a2698f10a9935ba969756a3880cad6dad1b2ab8a1e04a4d8d7a363b

  • /data/data/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF40D037700011094638E5591CB7E/userlog.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/mob.play.rflx/files/PersistedInstallation3520464644852240505tmp

    Filesize

    569B

    MD5

    f4c89fb55ae8564d17bd057fbabb81e0

    SHA1

    9737523f490018c8916970626330f5618e1b2575

    SHA256

    13492fac91a0be2f2ca55539c13345a7342274e80f9566ae65ff3cb58713247d

    SHA512

    39796248598d22d4f4e62627440e1d99540799e22562dac8accfee618864af30a1d3d6d018d174f10befe953e68a4554d15867b7a70e460445f238c145a866d7

  • /data/data/mob.play.rflx/files/PersistedInstallation5914275698242588084tmp

    Filesize

    90B

    MD5

    2960507107b259264fb8a362a4e26323

    SHA1

    5c119cfc6f810a01cbc4ec714f71d9c49ddcaf60

    SHA256

    994d6ea2fdc5cc7eae5912d32bf8e14b3389b70f6c44560d37ed9921ce261d76

    SHA512

    d5529bc16ab8cf8d00db65cef5e70c62870ad0be197eae1eaf8c518e60b1a393490a4a1c98f99b02f7b026f837f234433be72ec34642d31619602c769f199de9

  • /data/data/mob.play.rflx/files/StartappAdInfoMetadata

    Filesize

    1KB

    MD5

    40704af53f5eddee5fe1c7816326e733

    SHA1

    2ed50398dc42cd6bd41fc4340f464d6c5ffd304f

    SHA256

    1e80ce374d8c3a90a9f5183b3820a850db6a8e5431930bb9531828488395c941

    SHA512

    3af91e7f8b2451b1012ef18ddb2e2d45c44067236faccb758ff4f50a5f05fb9db641a202f1ae97a9efb07c5107d7a9aaadbc596b769709017eff86088485330e

  • /data/data/mob.play.rflx/files/StartappAdsMetadata

    Filesize

    2KB

    MD5

    c5ec03049f2a725dbe8dff5598ea7afe

    SHA1

    3272e70169bcb264b8072dec2dda5c2d2f7432a1

    SHA256

    8d11f72942817bf46c3b47ba9e7892b70b5ccee1e01116804ac1d5b683c48840

    SHA512

    8d0134a29ef6c20c39e755d4d36fee2c119ae32d6f05d1d62c8ccf116756f216e8a9825a5cfdd576576d79c9bac33055b47216efea7dd4f966a14111680588c6

  • /data/data/mob.play.rflx/files/StartappBannerMetadata

    Filesize

    797B

    MD5

    1464bff0fd2bc323b44f3019e32e43e5

    SHA1

    e723343e3d4bd22bab0510ab4d1233e346b4a838

    SHA256

    5225c5f27e665aa4efe233d9efa63a60e7a62171ed33c1667cbb5bf6b92e44a3

    SHA512

    dcfde2c757c5b83ed0060792c6900f1e2614410a2441563d2bdbadfc24326f73f2fa0fa7f2b7bd4555aa2a2b03c15e0ac3d28ad4836e0fda5484f00f8f2eac01

  • /data/data/mob.play.rflx/files/StartappCacheMetadata

    Filesize

    978B

    MD5

    c41164d8f5044093acc85a4f93b1ca1b

    SHA1

    2001e355baa615da01da5bb8b60c88f64d0e57ff

    SHA256

    5e478ae54831bad55c4dcda78db4fa071411c98ddf9d057ff557a36b1cd9c3e4

    SHA512

    3812f2c85d4e24df3e68b0912a2dab1d1fff198ae0cd8c238e925239b19a084cbf2d58831bf5897ce764029f28bbe515b98acfb940ce985280beb9cf6251c57d

  • /data/data/mob.play.rflx/files/StartappMetadata

    Filesize

    10KB

    MD5

    f47ceb0ed3053661904cb5da89068f79

    SHA1

    26449e9760c4dc279febfa87f4eba8be4a0925a4

    SHA256

    026b35dbcccf26464948b101248c29772ae5a3d8c8fe880787f72cd2deb02145

    SHA512

    0e7ac4ee4fe4f8bf6648014391796ee80b6cf53af4ee574df36309d1cfdb5f0ddf5f292e9b5a6c5e37bfc3011fd0ca1a6a8332b1344be16e77088101d41fb35e

  • /data/data/mob.play.rflx/files/StartappSplashMetadata

    Filesize

    1KB

    MD5

    84d44d07ee0cd574f5c73907b7a6055e

    SHA1

    19c7bb2bdf7f98e4ec69bbbd94981fd6ef8966c6

    SHA256

    e0a6705cbbe7af1c15e10c45b471bfff79dada9044f17fb7226c8fb6460f7ca2

    SHA512

    d8ecf9b58cb4aa25d14be75bdbd5c941dd5ecc98b85edd26110f93da78b552d3264b5458ae1e26a489f66e0d4771dc147d8afc73b6532a795e6457e27aa27947

  • /data/data/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    57B

    MD5

    cb4a66659c2bc6c54a492b59a76b5276

    SHA1

    442284fd126eb80d2b6f7917619f1446b94c8b5f

    SHA256

    332a1dc0694d89b3d46440a61fa25cb4a628cea90884880af3e6ea742c14949f

    SHA512

    88ada5dd66a18ae374e0b0df0007567f2f46159d400167b63ad46595419c214145e88f431c95a04da326a385d6070f0c759840b9d3a056a70d173db5b303bfb8

  • /data/data/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    541B

    MD5

    6b0f993c0b32d82defd46e43fe50c1e4

    SHA1

    fe1dc6faf3506ec46f135961a649d89909d1ce81

    SHA256

    708fa0f17498744cf530d20d0d1b9f61feb03bf62138b309d5363ea7ae0619c9

    SHA512

    0c79617f06cae366baaab7bd58372d4ab3d3bb7dacdd20c1a4297e5672778f75a9e451587735d6e8a37b4d68877796da15c9f381f789e6371027718b6729844a

  • /data/data/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    676B

    MD5

    a621728dcde6d82877f26c453ddef983

    SHA1

    ce1c09ef7cc83c24a2672c9da12fce90b1a7473f

    SHA256

    d9f27a7828e6927e47f4611a023017247230bbc4a52b8f2f50a8cd6e566760b1

    SHA512

    067c1957c458c82df9dedb3846587cb42dc7b7b2e3d5c858379975736776bda3cba3f5b04dd6bf7cc04eb7cb0535f224cd874586f84deb6eebb2b9a0fbf9ef23

  • /data/data/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    936B

    MD5

    2e256141924caff79039907bdb890c58

    SHA1

    fee6e73f786d421b578a93b8d7a1e93bc8288de0

    SHA256

    ac208d6dc57111dfb3e1f7844132b03d0c8996b4956b72be141ec545f85d5da4

    SHA512

    3296acfc69a432dda9f78bc84c1e44f55172963c9041e194ce5c493bb2a5e9a871e563da85231ac69fdf5c644ea46257a80d773788aa83cce3bbc2439191da67

  • /data/data/mob.play.rflx/files/UnityAdsStorage-public-data.json

    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/data/mob.play.rflx/files/back_.png

    Filesize

    1KB

    MD5

    527385c9a7dadd870919fb95ce4ff227

    SHA1

    a83ddb0ba89e4f83a07d6e0524d6ea900e800c2c

    SHA256

    3df2ccce7702c69051afd3fe66cf99e3f07e86d354956eba3888ddbaf545e717

    SHA512

    3b2f1781552f701331e91eb46fd38a982b2a9de8eb7259e912a710c63399fbe86fcdbe4c41fd8b8f34b99773a94cb02024e9ec64c38aeea68ef378de4f842355

  • /data/data/mob.play.rflx/files/back_dark.png

    Filesize

    1KB

    MD5

    74860bc33c04b72a4848a5d7b97bec5f

    SHA1

    336856eed4d49ebd0d429877822ac5781b4a18eb

    SHA256

    fb479f88bc809d106fc15c465079b19f6027a01ecbd0d79267147c0529adea69

    SHA512

    9b6993ba917c3a687b0df03deaf9e5e6ac41d3606ef148e259eb32de8c41203249063059a11bd598b860f2e3d795c73cd339c5325f80a2623745e7003f6586aa

  • /data/data/mob.play.rflx/files/browser_icon_dark.png

    Filesize

    1KB

    MD5

    c954c504c75c8ba2b112deb64869f78d

    SHA1

    5b594778f7a5bdac4e41de2d6c81225d5e329e0f

    SHA256

    37ee870f153d26b3956abcead4c45160b264fde6ca016bc2d330e9e36060ee46

    SHA512

    af1705681c3a2ef83427c853d310bc2dd6159f5db1c1b5a5740431a5a928b4c6541dcd5e3fcffd6c06697b87ca740a0ce2473e2cf141f21ee13730f325d4403b

  • /data/data/mob.play.rflx/files/close_button.png

    Filesize

    2KB

    MD5

    4d332a5c731fb506bb4644c91c38f5fc

    SHA1

    56fdadb5d38b29161910b3c89ce57b1aae67733a

    SHA256

    43e7ff284e786cced9a54218970d357ff06374836bc1791eb63d9bf26c6a3784

    SHA512

    c791b70329e32559d99f0259b38a832bc849768cab37973567a04fe8f66e9f5477136014ac17d16d1a0df0ca0f4fdad86d6a5f29581c85068b7979fb9e73b7c6

  • /data/data/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    33B

    MD5

    35b51faac8b5af3886e70bb5a885dab1

    SHA1

    e6cb282da46cd4bf113e25c8573268578dcd11b6

    SHA256

    af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b

    SHA512

    6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

  • /data/data/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    75B

    MD5

    944e6a5a08cb971370c65c06061f0ab4

    SHA1

    84d47725cc29bf167b782c702575bce4bf2ecc5b

    SHA256

    ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab

    SHA512

    bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

  • /data/data/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    121B

    MD5

    ffcbf87665a36fc21782400bd0537e79

    SHA1

    3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee

    SHA256

    a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d

    SHA512

    7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

  • /data/data/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    163B

    MD5

    dcf7d6c1cfd5e7b56074e3001577c78b

    SHA1

    b8eba89aee9f6688ecda6675ef8ff4998da0b141

    SHA256

    ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91

    SHA512

    42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

  • /data/data/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    212B

    MD5

    9679a75da6ff92cfb31f9cad50cb56ea

    SHA1

    df30876fd7700dad16701a4f7be58b4df69868af

    SHA256

    d68aa564182fd41d4123c535a092cac47ee37259765d599b5b2e1b9386a18169

    SHA512

    84c679ac38088a8e508d2f4e2e95c00b9dbb8ff2ab839632aa973fe19ca42723fcfc750fdd20af0f9f5a0432c0fff075055a7439e945faeed6ce26369b6be34e

  • /data/data/mob.play.rflx/files/empty_star.png

    Filesize

    882B

    MD5

    136e73ffc6805e043bf61a12b3755b1a

    SHA1

    b7bd8ee6bd46f7bf3a2f21879e71ff4684e56361

    SHA256

    ecf9d2a4448842086066d82fecd6ec372497298bfef3c8e3fd17a97187a3e7bc

    SHA512

    62a12a8070955026e27e6c146d46bc44a345b0b4752e1c45487f06224e11c42490344b259ee6fe51fb6e9847cf4146abd7d4fbd0274d0f2c532868bc4be5d527

  • /data/data/mob.play.rflx/files/filled_star.png

    Filesize

    740B

    MD5

    4ef85932c17e863921c9bbdf1394fe92

    SHA1

    f3811986d3648be1ca89162a079aff4644fe26d7

    SHA256

    0d6e7d7a915944adfb498a45a6db96efc77d0112ba1f374461868e257315dfa3

    SHA512

    1ba7939efbd515f81333a155064e248de27b2c70cc71004136ab9d3c61ad34baab7f1d00529e1c78d4cdf11deddbad2376d27d5ab1af699a9d29c5b5da7f4db1

  • /data/data/mob.play.rflx/files/forward_.png

    Filesize

    1KB

    MD5

    795fe2fffc9505398b787eb2f15f440e

    SHA1

    c124812df2fbd8e4a65fb104aaab352ba300a57a

    SHA256

    976cb8c0c715b0b0e8b4769b51af1a08f06a4823d69b1f5284fec4531da21fb7

    SHA512

    c698c060692567afea47446d58d32e92b0bc922088c99e175f5125b264c20d425fe7dddc4b0d70fe9f53d41cfb87ef52965cd40934f21c9f5e2b9281dee72389

  • /data/data/mob.play.rflx/files/forward_dark.png

    Filesize

    1KB

    MD5

    ae1702688d33694b08e2f990527fd179

    SHA1

    fccea348af9e98608b152c1e35307d04a1cddeb1

    SHA256

    87916bc88b54b8602b2f43695d34b196b5cc8948ccb6576b24cced2feacb245f

    SHA512

    aa0aa7306867900ec765e0645e2666ae1a913fb1bc67ba205b3b80d1b37089bd8692c2b34fca233ed3bcfe89a42f095a375df787d5c29ced86bd040981110d2c

  • /data/data/mob.play.rflx/files/half_star.png

    Filesize

    881B

    MD5

    ba75be02cd7e410fa660a1783b0fff3c

    SHA1

    b5b60389112f5c6179878423c6c97eb5ab1680b4

    SHA256

    77a060cb9e3f9a5eb52654135d00106d36208f3d38878ca3b752ca1af85cf42d

    SHA512

    9985e466e1652eed843a9dd97832b8ee9bad05cd591a4b17548e876ac65c6cfa4da4f46e83dddf89f9fb1924d92dbf21ce13e66059d5cc7dbe0500cf0c0e7b0c

  • /data/data/mob.play.rflx/files/logo.png

    Filesize

    2KB

    MD5

    5f93b7b61e5bcf973fd93c049061023e

    SHA1

    7c154666967abc13d9d38c9b79eb6933db64566f

    SHA256

    4e537f889054c9f1dfb4b1a30c34ea180310dbc9b9bcc9123605f0f802a24557

    SHA512

    d96bb4c9daab3b2a72a3d82682a8f66ee85a0eb525a87afd13f46de949ee8a02d9a560da6584ecd658681c93a13df03d9a0f57382fdc40f56b2541a51e858a67

  • /data/data/mob.play.rflx/files/profileInstalled

    Filesize

    24B

    MD5

    923e8c206e12345dff7eca043da55f39

    SHA1

    cb0aebeba580eaa772ef792deef1c711f5f8ed72

    SHA256

    acdb9c1fa5c01186d2d00b427fb8d874868eb25c1d6a8ebd9df40680777aa5c0

    SHA512

    64476099155ccca87c1b67b324ba361298700350182d0ffcf0dabacb67ab083d84b6ee5021c8c54945c9780d728a8df84885f81cbfca6fdf359e875cc76e523b

  • /data/data/mob.play.rflx/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    8bebcf35e41d85b42383cd4843a8454c

    SHA1

    373cf730ae6f0642ae0272ea0f9b60e249793822

    SHA256

    1f3f4e806d378f4ae0050312ec76422afa3c59f17a275d7a217c74c159fcf45f

    SHA512

    7fb81708e8827e6adb9b47bbf272a29f5446f2eb4d44d5038b9fc2b835a1a169454e9756e39af06efde35ee94a09b9217f3027af968261cb632168cc199a4c82

  • /data/data/mob.play.rflx/files/shared_prefs_sdk_ad_prefs

    Filesize

    153B

    MD5

    65026ee778e1372d9f4aed742772e893

    SHA1

    5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc

    SHA256

    15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c

    SHA512

    589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

  • /data/data/mob.play.rflx/files/x_dark.png

    Filesize

    663B

    MD5

    2e42562e9d02dafe67ac6404f58289b7

    SHA1

    c37072894b2169be2643dd5e541ff8dfccecebe2

    SHA256

    2f70939006596d2496c26284508e70ef260968eae1385c220e91e74b58e0d13a

    SHA512

    a65a9fff0c6e17c322d0f0d6e0233fcca6d701a331a0fbc7da7eb21474c11875bd0e3edafc6c1df248ba85f22fc47b403d5668316405adcd8f6e4907a893d3bf

  • /data/misc/profiles/cur/0/mob.play.rflx/primary.prof

    Filesize

    2KB

    MD5

    8e1f9222fb599ad3bd0609c68c453e97

    SHA1

    c6f1b2b173917844eee1519f85572faca81bf2d1

    SHA256

    d632bf8f2047d9a3278120b2f35ad5960a78f62ab8bd8b8cc04832857be39bd3

    SHA512

    f7656a5f4e0eb97d920c65d5a402d6efe64278ef9d3eaec835830f65723b71ef13abcdf97fb07012d5ef4c4c00c56a6e266fadf42624f5aa8bffacd39bf8bead

  • /data/misc/profiles/cur/0/mob.play.rflx/primary.prof

    Filesize

    10KB

    MD5

    825020b2dd34a7dad3a6287980239f5d

    SHA1

    420f97c7e2d7638d1ad84ee4a108008f934bf01f

    SHA256

    1b97b78c194adefa6b3f29974d818802482f2af76c518035e59dec75bb44f434

    SHA512

    ee37116d2dc03ccd06279bd451b3107161b0af4bd1db966ac3be94d771c338a9265dee4429e82f07dd2364a4e02c103ad9cdc80a495d4ad8cd90f945adb19416

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html

    Filesize

    2.1MB

    MD5

    60613793d0bce882b80f2429f3b50edb

    SHA1

    48b22e5a190e572e9014a10c4a4543e57f2cb332

    SHA256

    92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54

    SHA512

    81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json

    Filesize

    719B

    MD5

    d165470950d875a5ef05e52b16fa2b71

    SHA1

    8eea6374a2f17e04a9265785fa1c805c4c3468dd

    SHA256

    ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c

    SHA512

    41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db