5f80dd7fccff6e15d5eda6e0e8263d9f985462155d23f335baaa0a44ea7f5712

Analysis

max time kernel
86s
max time network
158s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
21-07-2024 11:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5f80dd7fccff6e15d5eda6e0e8263d9f985462155d23f335baaa0a44ea7f5712.apk
Size

6.5MB
MD5

ac1b77d65246799e91fbbaf7c6a9cce9
SHA1

c9b3c027566da411e66942af9a575893ffd41f5c
SHA256

5f80dd7fccff6e15d5eda6e0e8263d9f985462155d23f335baaa0a44ea7f5712
SHA512

f4a832849613f95b6cfceadceab792fd0022a7f925261ca950e963be41103d1bde93bb6c0298de7f13038b2c2f677c986a1637807bea1c27276292a02aba1089
SSDEEP

98304:UUg7Gu5IfRSnPueFuaSMgg6MKRbV+pui2rmyOVLSFivt+OCvibZ+9Uy:ZeGIIteIcx6lbQpuiodMkiViZ

Score

8^/10

discovery evasion execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

evasion

System Information Discovery

T1426

Processes:

mob.play.rflx

ioc	Process
/system/sd/xbin/su	mob.play.rflx
/system/app/Superuser.apk	mob.play.rflx
/system/xbin/su	mob.play.rflx
/system/bin/su	mob.play.rflx
/sbin/su	mob.play.rflx
/system/bin/failsafe/su	mob.play.rflx
/data/local/su	mob.play.rflx
/data/local/bin/su	mob.play.rflx
/data/local/xbin/su	mob.play.rflx

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

Processes:

mob.play.rflx

ioc	Process
/dev/socket/qemud	mob.play.rflx
/dev/qemu_pipe	mob.play.rflx

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	mob.play.rflx

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	mob.play.rflx

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	mob.play.rflx

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	mob.play.rflx

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	mob.play.rflx

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

mob.play.rflx

description	ioc	Process
File opened for read	/proc/cpuinfo	mob.play.rflx

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

mob.play.rflx

description	ioc	Process
File opened for read	/proc/meminfo	mob.play.rflx

mob.play.rflx
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu pipes.
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4244

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/mob.play.rflx/cache/image_cache/0631c52cc80be41bb7a2b5000c18a63ed5ee588b497f25a4ecc5c457e9b5cc76.0.tmp

Filesize
829B

MD5
0e44ab502347cd6860ea57915f71154e

SHA1
a55724906ced449fc37e54f7be15367825f004bb

SHA256
ea3a8a7d0d9245205b7bb92d524fb62b9fc89292a60f944a0b9ccdc7cc08b18c

SHA512
da2c2c8408a81f04b98b6c75b99709a93aed527150b359377712abd2c48e80c826cd1f4a9a38694e35f05235195c9e350a7e87e566ed3ec60d20618c34db0458

Download Submit
/data/data/mob.play.rflx/cache/image_cache/0631c52cc80be41bb7a2b5000c18a63ed5ee588b497f25a4ecc5c457e9b5cc76.1.tmp

Filesize
518KB

MD5
61b254c88b0bfaf95b7466e1f9c1d5ed

SHA1
518c9a33c2124ef01f7f9806c7d097997ea844c7

SHA256
59e5c02555ab3e2d0680fc66897fbee9f911863f8187753aaadcc40b211c3337

SHA512
9f3e177dc50756308649867fd2d2b155d25450534e539e6189ca573a60c6d53c02fc82f19976f88a9836522d5f2d79e35b5c3b57f7e1afdccbabfd95eb35efed

Download Submit
/data/data/mob.play.rflx/cache/image_cache/6aeae7ce4c302f286ee4db30d2a576f01443d3f5221091717edd4887e51f65b9.0.tmp

Filesize
829B

MD5
6cb236bdd4fc367079ab8c935b6a5c03

SHA1
497afbefc3e2da1b6c54720731f3cc76217ad13e

SHA256
9b9a0e7f17e0cf7f4ec6d064b7a079bef464b02077741d735c09820d4c35796c

SHA512
2ea3dc7ee81ec85dde7195b55be7862d421742b25d96b5bba300c91afb1c51e2b74fadf30017e8984a96af85d561177620633bd306fa7ebf47af58e6b920b09e

Download Submit
/data/data/mob.play.rflx/cache/image_cache/6aeae7ce4c302f286ee4db30d2a576f01443d3f5221091717edd4887e51f65b9.1.tmp

Filesize
601KB

MD5
81a9125ee296d8e00e7964c0676c7a34

SHA1
25dc58b095b39c5bcc6897988999c2e9aa7fce6f

SHA256
94bf1fc36e2d7fb7db20d5b207131d8b0ba9f781ccc58e7e73e5735229822142

SHA512
1540a3bd7647caa78051e7235313749dbd6fddbe80cbe0b68f9f4145c8e7ad44aed42e018d62cd6724e083a03da371fd441a1c2f163b5bc8b86ff79af30f051f

Download Submit
/data/data/mob.play.rflx/cache/image_cache/960548dd38d1fb7efed33491e8374ddaaa25e77bdeb19c92e8fd6cd4efa5d25e.0.tmp

Filesize
765B

MD5
b062371d70d94204e2dd132c51419c5c

SHA1
59750bafa5a809e30aa160d1775dc3f826e609e9

SHA256
9dcb36376e58862c6acc208909c7fec4cc22324af69fb94d854b22262e28fabe

SHA512
4f47fc640cc2b995a658c2e3c858f08207f350556bbc7982c2d9b15057e640e00e130165f4ebebe6b000f815b02473e2829a9baec73be8932b3d0085294ca0fc

Download Submit
/data/data/mob.play.rflx/cache/image_cache/960548dd38d1fb7efed33491e8374ddaaa25e77bdeb19c92e8fd6cd4efa5d25e.1.tmp

Filesize
923KB

MD5
9ff295239bab3308657b0d5f17673b8f

SHA1
a4dda42677bd31253aa4c6307601c83d65847b3a

SHA256
efd50d627d6b634ab04203912f60335a3f11b57a9fe5bece1bee9ea12bfa2c34

SHA512
a21a09eb9321c4c19157e7f49e93b6da53ddb0c658e3a48fcdb84b4ca9ca2167bd075cf4e6865bd85f2e4e378d3507a049376a2316808e7f1b34b35c2a0564c1

Download Submit
/data/data/mob.play.rflx/cache/image_cache/b4357f191eb2113e24c3ba57eee0c82c665d9ba9ecaf690c4b9cc818c99456c7.0.tmp

Filesize
829B

MD5
f7889703b853d9404a498f0a66584a72

SHA1
b1847d4854a4db6eece1a114dea0bf04b725d3d6

SHA256
c6c87cfdb67041a932dbcf47ccc47c04e20c7afa450c6f631bc44cde19f722a7

SHA512
ada9d85f935ae4fb0d603f57a826922e423fed3961c9075e1beaccfd8546c212a5eeb4c85654a6a812476f299a75aca3157505ff1434df83919ad02b66e83a11

Download Submit
/data/data/mob.play.rflx/cache/image_cache/b4357f191eb2113e24c3ba57eee0c82c665d9ba9ecaf690c4b9cc818c99456c7.1.tmp

Filesize
117KB

MD5
8009da1d0a5714c499a604412408c630

SHA1
76037bca5c34d8c414109ea2383b4be50df5a317

SHA256
d1d31dcdb835738a46d7391594bc66eee0c8e27061c053e4644c3d25d78f629f

SHA512
bfb6bded0e8ad3474379a296c0123217de19291fb99227a16f2363598127b21c6a665e5ab8878a2a0b3d995b5509a4ad78e83e1710270375c993dd4a3013c234

Download Submit
/data/data/mob.play.rflx/cache/image_cache/c2db154e9c5dc9e3865fe230279f47c5a5927f9011591ad2dab2f4aba6ebb8ae.0.tmp

Filesize
694B

MD5
33fdc135b997e93edb82b58b4a3b17d9

SHA1
88ea830893fe0df82c48b215cac5362962075d36

SHA256
6692fa030d57cc67968c541bb4d6f97dcee0e73bf0b306bce3517ec2b7167f0c

SHA512
b67bc0142cfd02c7dff7f53ec2f65b3406559e69e59bef46fdd5c1e670a3e96e202fe46461f994868f10fd2408f53ff2aca764a85e28afdb5c650f0aa5bef157

Download Submit
/data/data/mob.play.rflx/cache/image_cache/c2db154e9c5dc9e3865fe230279f47c5a5927f9011591ad2dab2f4aba6ebb8ae.1.tmp

Filesize
18KB

MD5
5e7fe455fbcf15e641f29f91c57d302c

SHA1
e35f3a2af1d28a8e0c85bd1160909b86c4f50b15

SHA256
a8a7a539f4365a950b9ad1a81fcc2d1b3d7c73ac7a0587a1e7a5da4cdec4b015

SHA512
4195c21b7eabeb0677585342f7ead8ac2abef7c71181f7e9d51297b5f5ab6b70f4c8b9aa5f3ea23848a87fb43f896fd804926e8b5ced30c977e70aac1404b81d

Download Submit
/data/data/mob.play.rflx/cache/image_cache/cd48320395cc4b383d8b1dbf39da61cc33acbb8508ee39b878a41ad85363e67c.0.tmp

Filesize
861B

MD5
ca9d62689a82c55f86423d8bb027c583

SHA1
c85c74591e0fa1d13e9a46c644800a10e7405517

SHA256
0a663549aa383c190ef4763394a180cb7333196e1d456cfcc86f638a4b69c5c6

SHA512
e26b77c02f9705f806f9776253173026b82ed05a9a67b82c2116c35ea70744250f8de5770b868603224bb5a0962b5ad825a9476b8f62057695ca9a089b6a0ddc

Download Submit
/data/data/mob.play.rflx/cache/image_cache/cd48320395cc4b383d8b1dbf39da61cc33acbb8508ee39b878a41ad85363e67c.1.tmp

Filesize
164KB

MD5
309c949338ffd39a1a040279d48dc769

SHA1
7e0bdbc4f418f28343a836470159e67896cfd3b8

SHA256
b8392328bc9b4ade69cc48feef07d8713135e1ce88041d6427b363214c2e8d20

SHA512
0b7d755ce5606e84336e45ccd7a40a32de875f773354fdc3ed6909d9f78c993d22e2511ce8e86caf8eb1c4f6da79125abfbadd5591ab7499c701d34929ea6936

Download Submit
/data/data/mob.play.rflx/cache/image_cache/journal

Filesize
1KB

MD5
6f2e1d49c06d4fa3c6c95abd5b003f34

SHA1
bf2016657bb96cca4c050ae8e4de5a82139676c9

SHA256
43a540a9c11bc7a46a6e741c0a42392895d715942bbeb89e1a136ddd8155dec6

SHA512
04d1ccc77a7706b42c969d5b97165a79f7d5648b2585c0825ac701b6d5191a234d8aeacd79ebc86decf1cd335a914f67eee4da91867e98795e3e8036f3342b14

Download Submit
/data/data/mob.play.rflx/cache/image_cache/journal.tmp

Filesize
31B

MD5
d6ac8c8db0504502d7f0e057a78c5ce3

SHA1
8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4

SHA256
8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a

SHA512
100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

Download Submit
/data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
512B

MD5
d98acf73268ab1cd60a45f3e8311b443

SHA1
a44d01aa169f9b84f9cbc73a227fbd89704f4242

SHA256
4e52522598993571af547e343bb120e4ca1a1c86765f0c85f53d90360c79f7f5

SHA512
5a7c8f2f49d20566f75b4d24ed4456d457fd5a425ff2dd3d44c3a39210fd96d6a11ea9535689c3cd8f4c9ba823434c55b1a956265d7c4de1bbc94508c04c0664

Download Submit
/data/data/mob.play.rflx/databases/StartApp-d6864f2502af7851-wal

Filesize
52KB

MD5
e531e56295f09caa5c84f7e628861ef4

SHA1
754fdfcbffeac94425fbbd494a3f044378ecf8fa

SHA256
4aba2485304991b9df0cc52d49fdcb28f338e41be9ecd579eaabc55c5d090d9b

SHA512
c9cf36be687c20951b48e95997bac03fe9efe6091c47cb1d8e55ce6ec2f678528c6d55fe2f2a426b40f26ab808245064ffc8aa51c85e56b5cca9ed3251233ba9

Download Submit
/data/data/mob.play.rflx/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
0167eaa01ec3613155d001b0d6b01c0e

SHA1
842951f621da71db197418b95e7c4c75957fe3ad

SHA256
d4ff8e1af017e16cf812f5b4f388a0937372e5c26798188f79c4f9e6f76ea0df

SHA512
6a288e023568441c39e0a1dd1f8696eda5de7171e25eb02d5d3bc409b13fe3205c3829f998cb5b9083dfdb35d2ef8ac812f6eee1c2b36fab4c40214771e46823

Download Submit
/data/data/mob.play.rflx/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/mob.play.rflx/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
9c7a12faa9ff2c7457d5c660d0d03955

SHA1
023c834faf04af54672864651d933b57435bea25

SHA256
c677ffee854103145e86f1fb9d29e2913939e6d3aa54a3f92a0a72e76c154cfc

SHA512
fe545f61bffb50c8f525a7d183ee30494d6af45dfefaeff968e746749ae5b8ff350432699fe78c05e62f3e481367ab3b042b435304bc7fdc6d198d191d8f4f9a

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6c98396f104bb64885a514e268eaf6c1

SHA1
3d446e4c8ac9fd0c65a25209f4dc5a7c0f099cd6

SHA256
c1eced97f992d1e56771ee7909d75ef545e2c06b088716510bd91d21e94418e9

SHA512
1194b43615e1bf52bbfb7f68030b87367cc1959f5bc521f041e684d1d96127650435ddd4143299f8320cd42080fbaf5e68ed55bbfdc024212733c346a7fc3ebe

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
10eeb9241203bc62423423dd1ca6eed6

SHA1
520ea66d85645f3b3ce4775dac213882b9adb9e9

SHA256
3aa21bc0e8b518feff274cfd2023f0e178d13d7fa3dbdab43d16ad7acbd22cd6

SHA512
9832552c2fb5186688b927011794a537c4838c050a3f48f57e40898022d7338106a19b24c14779c3878adaa9f6a439e48d43e4237c0d80f55f250ebc9b16c0bc

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8063483dd8256a196090722ea8f94902

SHA1
4a120178c9be414ea5d08f0543bdfc2da390df97

SHA256
ff02a9bdfeb4e6d8447df1ca6f40ecc7bdc62c0fee2861f744c21e560e49a3cc

SHA512
acc68e920ef1cbddcc691717220aa5378df42e6f3db050620af0b3ee9cc869a290db65352f7e1fb09651fcc95040ed7585034d65358d1f7907479fd02db7c859

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d54ea409dd8d37334b9daced039bfef3

SHA1
819088d53c3663c808258d472a1a2b31f3248851

SHA256
10efc55e53521fc17046238ead196983bbc2d531c124fcc506108f245af388f0

SHA512
4e01c600ee0100452f9016c37e5c8d1032ba5e7d9e30e41f7ee8302e7aadb071737396bef9a225545c05a27fae6c6759b6936032d29479e4657d9bd3a840f70e

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a1a24b47ce4a58a49c982a81ff846289

SHA1
69faac036ef0f29b0c4c0e89f1bfcb8357b60cb4

SHA256
2f0a99ba8d927ef83d9e653ad169cee72ae639b0e002394a8e45119206f2f4d2

SHA512
708a5abcb4d908d2842a028b76aa1eabf66a6114ccd580667198fec6c07444c7665ed257ceda7937f124e1c8f81325d89647783398e9ce3655f01018ae75f3ec

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
a0ee0346e964eafdd891d566dd7f7fee

SHA1
8eed4ec7b2fc07c310cc25fff243b78f400812bd

SHA256
96be54b2a36fa369f9200fc3ef62d82d9776db17266cb20eae404aaa9c9ce1ef

SHA512
541b3297b05bd803a6f29d59dc1a1b434aa2c6b035c83d5574144d37f9fba5794a6e3a810b34c92134c2ea877606dd68e01691d2b447433469967e0aa201f56d

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
5f2c2612d285c7555473e03a1fbb8cf3

SHA1
02174ecf2f11c42038316c6cd85efab24578021c

SHA256
8035b07ed4efafb0f6f6738620ccd901d5514447d6dba7346a0ea276d331766c

SHA512
ccc94a45bfffd6aa9074e6cc72144a2aad2468301acdb75f706d317bb0d676494d4760183f90248079317bc0ff429e4454b2d748178ac99c719262734318b1d8

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
dfabf42b00197ee8e3a2cc6289810cd8

SHA1
9dadef3401f921403bf681ba5d5c7c1d750d45a3

SHA256
1cc7d350bc1b6b39c3eb112b858de16fa8c66f2e02915023194b0d90a7908895

SHA512
7fc97f1a2a4fe623d591637deab48471d307e38c06e23c4cf42e957b0f0835ebdbf19cdede92bf89d2fc7a3848e871744a7dce5138c30b2b6e000cd6ef168ebe

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
94cca532847bad76dc53a5ef20db85fe

SHA1
b43da68452ba1392a1157d6c393bdd78e9f2dbad

SHA256
98e1f44a991c7949102e1ef9fc1663edb6c227af0019971d097ace5b4d04c848

SHA512
beb48c58c953e27dfb483c31cd2a7ffd5fb632881c7b74cfd595b2b097c3deaa90efe60d600c4bde08877ab35a60a262e687ee2df578dfc36f899a7853cc6866

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
4f81837ba26c3a75ebe1e6e1c03078dc

SHA1
c722524f5f31b78ccfa0fc0bb811c7090778c3d8

SHA256
b4472cfd6ed4408bd26aa87cb84efd74b838f294c1ad9c33882926c2b58e1bf9

SHA512
b7f26611033d79b706b5b447e3073871663213fc07a807b57dd90f1b160ceb6902e8ebd0ace0aa2f1c26e0c682504322ec0ff0ede408ca5e7a2a665f7dc9fa85

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8dc51460616239cf4647089d1262f7f4

SHA1
c2ec315b403abbe6a4015f44f0b578f89d9b6af3

SHA256
1b90f055a6a3446b3bbfd1f7c17e9f792df930e910ecafc92ac4321f72111306

SHA512
bde36a075fa94b205b7b1ea1b0265d3f981152a09bc767edab1706d019a460f18749a88c35e06b77e47f36c869d8cffe4fd8b3e5dce749717e0f8665424e6649

Download Submit
/data/data/mob.play.rflx/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
45fa674ef769a86bc38685238be35585

SHA1
ae71c8bbf4fcf452945cb8b6761c2510c9bae466

SHA256
4c1649a4be8e566da1fbd55a3eada4a17e0a1378b25c701eb8b6007f284ea37f

SHA512
7c16af890e0f9f020db48d23473571123a3712aeec7e04f0cb82fcde5ebf4dcbf060b271bdaee94bbfca3168864f97a7f99ddf942e886f90e2afba1181b91449

Download Submit
/data/data/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF40D037700011094638E5591CB7E/report

Filesize
786B

MD5
3e08b123382d4e92c11a582ab0e539bc

SHA1
8c1e1ade0ba99335635a7c5198acbcca8e119493

SHA256
45b9c7a9799aae911c9a8a0da4083a9b719c3705fb6773ec0bcd08617efa8b59

SHA512
919463dffb73892308526be807e2ede7481ee6f866313b9b98f8142ac9a5094146f50c43a02a898d11658d12413511a772e8a8273e345910684a923c28a22b8a

Download Submit
/data/data/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF40D037700011094638E5591CB7E/userlog

Filesize
185B

MD5
74aebbf5de1fc8950baa7d374ed3ae8f

SHA1
c83bf354a208ad890482ab44f8d3d4d26075ba2f

SHA256
93a5236a6601a8957eb1079baf1a10a959f2dbe255deb0be1ae397bdad95433b

SHA512
e58318bf659d00ec8f786ebaf9ac696db11bc8edf38088eb2f89cceef8c2dfe4c5da31dd8a2698f10a9935ba969756a3880cad6dad1b2ab8a1e04a4d8d7a363b

Download Submit
/data/data/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF40D037700011094638E5591CB7E/userlog.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/mob.play.rflx/files/PersistedInstallation3520464644852240505tmp

Filesize
569B

MD5
f4c89fb55ae8564d17bd057fbabb81e0

SHA1
9737523f490018c8916970626330f5618e1b2575

SHA256
13492fac91a0be2f2ca55539c13345a7342274e80f9566ae65ff3cb58713247d

SHA512
39796248598d22d4f4e62627440e1d99540799e22562dac8accfee618864af30a1d3d6d018d174f10befe953e68a4554d15867b7a70e460445f238c145a866d7

Download Submit
/data/data/mob.play.rflx/files/PersistedInstallation5914275698242588084tmp

Filesize
90B

MD5
2960507107b259264fb8a362a4e26323

SHA1
5c119cfc6f810a01cbc4ec714f71d9c49ddcaf60

SHA256
994d6ea2fdc5cc7eae5912d32bf8e14b3389b70f6c44560d37ed9921ce261d76

SHA512
d5529bc16ab8cf8d00db65cef5e70c62870ad0be197eae1eaf8c518e60b1a393490a4a1c98f99b02f7b026f837f234433be72ec34642d31619602c769f199de9

Download Submit
/data/data/mob.play.rflx/files/StartappAdInfoMetadata

Filesize
1KB

MD5
40704af53f5eddee5fe1c7816326e733

SHA1
2ed50398dc42cd6bd41fc4340f464d6c5ffd304f

SHA256
1e80ce374d8c3a90a9f5183b3820a850db6a8e5431930bb9531828488395c941

SHA512
3af91e7f8b2451b1012ef18ddb2e2d45c44067236faccb758ff4f50a5f05fb9db641a202f1ae97a9efb07c5107d7a9aaadbc596b769709017eff86088485330e

Download Submit
/data/data/mob.play.rflx/files/StartappAdsMetadata

Filesize
2KB

MD5
c5ec03049f2a725dbe8dff5598ea7afe

SHA1
3272e70169bcb264b8072dec2dda5c2d2f7432a1

SHA256
8d11f72942817bf46c3b47ba9e7892b70b5ccee1e01116804ac1d5b683c48840

SHA512
8d0134a29ef6c20c39e755d4d36fee2c119ae32d6f05d1d62c8ccf116756f216e8a9825a5cfdd576576d79c9bac33055b47216efea7dd4f966a14111680588c6

Download Submit
/data/data/mob.play.rflx/files/StartappBannerMetadata

Filesize
797B

MD5
1464bff0fd2bc323b44f3019e32e43e5

SHA1
e723343e3d4bd22bab0510ab4d1233e346b4a838

SHA256
5225c5f27e665aa4efe233d9efa63a60e7a62171ed33c1667cbb5bf6b92e44a3

SHA512
dcfde2c757c5b83ed0060792c6900f1e2614410a2441563d2bdbadfc24326f73f2fa0fa7f2b7bd4555aa2a2b03c15e0ac3d28ad4836e0fda5484f00f8f2eac01

Download Submit
/data/data/mob.play.rflx/files/StartappCacheMetadata

Filesize
978B

MD5
c41164d8f5044093acc85a4f93b1ca1b

SHA1
2001e355baa615da01da5bb8b60c88f64d0e57ff

SHA256
5e478ae54831bad55c4dcda78db4fa071411c98ddf9d057ff557a36b1cd9c3e4

SHA512
3812f2c85d4e24df3e68b0912a2dab1d1fff198ae0cd8c238e925239b19a084cbf2d58831bf5897ce764029f28bbe515b98acfb940ce985280beb9cf6251c57d

Download Submit
/data/data/mob.play.rflx/files/StartappMetadata

Filesize
10KB

MD5
f47ceb0ed3053661904cb5da89068f79

SHA1
26449e9760c4dc279febfa87f4eba8be4a0925a4

SHA256
026b35dbcccf26464948b101248c29772ae5a3d8c8fe880787f72cd2deb02145

SHA512
0e7ac4ee4fe4f8bf6648014391796ee80b6cf53af4ee574df36309d1cfdb5f0ddf5f292e9b5a6c5e37bfc3011fd0ca1a6a8332b1344be16e77088101d41fb35e

Download Submit
/data/data/mob.play.rflx/files/StartappSplashMetadata

Filesize
1KB

MD5
84d44d07ee0cd574f5c73907b7a6055e

SHA1
19c7bb2bdf7f98e4ec69bbbd94981fd6ef8966c6

SHA256
e0a6705cbbe7af1c15e10c45b471bfff79dada9044f17fb7226c8fb6460f7ca2

SHA512
d8ecf9b58cb4aa25d14be75bdbd5c941dd5ecc98b85edd26110f93da78b552d3264b5458ae1e26a489f66e0d4771dc147d8afc73b6532a795e6457e27aa27947

Download Submit
/data/data/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
57B

MD5
cb4a66659c2bc6c54a492b59a76b5276

SHA1
442284fd126eb80d2b6f7917619f1446b94c8b5f

SHA256
332a1dc0694d89b3d46440a61fa25cb4a628cea90884880af3e6ea742c14949f

SHA512
88ada5dd66a18ae374e0b0df0007567f2f46159d400167b63ad46595419c214145e88f431c95a04da326a385d6070f0c759840b9d3a056a70d173db5b303bfb8

Download Submit
/data/data/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
541B

MD5
6b0f993c0b32d82defd46e43fe50c1e4

SHA1
fe1dc6faf3506ec46f135961a649d89909d1ce81

SHA256
708fa0f17498744cf530d20d0d1b9f61feb03bf62138b309d5363ea7ae0619c9

SHA512
0c79617f06cae366baaab7bd58372d4ab3d3bb7dacdd20c1a4297e5672778f75a9e451587735d6e8a37b4d68877796da15c9f381f789e6371027718b6729844a

Download Submit
/data/data/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
676B

MD5
a621728dcde6d82877f26c453ddef983

SHA1
ce1c09ef7cc83c24a2672c9da12fce90b1a7473f

SHA256
d9f27a7828e6927e47f4611a023017247230bbc4a52b8f2f50a8cd6e566760b1

SHA512
067c1957c458c82df9dedb3846587cb42dc7b7b2e3d5c858379975736776bda3cba3f5b04dd6bf7cc04eb7cb0535f224cd874586f84deb6eebb2b9a0fbf9ef23

Download Submit
/data/data/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
936B

MD5
2e256141924caff79039907bdb890c58

SHA1
fee6e73f786d421b578a93b8d7a1e93bc8288de0

SHA256
ac208d6dc57111dfb3e1f7844132b03d0c8996b4956b72be141ec545f85d5da4

SHA512
3296acfc69a432dda9f78bc84c1e44f55172963c9041e194ce5c493bb2a5e9a871e563da85231ac69fdf5c644ea46257a80d773788aa83cce3bbc2439191da67

Download Submit
/data/data/mob.play.rflx/files/UnityAdsStorage-public-data.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/data/mob.play.rflx/files/back_.png

Filesize
1KB

MD5
527385c9a7dadd870919fb95ce4ff227

SHA1
a83ddb0ba89e4f83a07d6e0524d6ea900e800c2c

SHA256
3df2ccce7702c69051afd3fe66cf99e3f07e86d354956eba3888ddbaf545e717

SHA512
3b2f1781552f701331e91eb46fd38a982b2a9de8eb7259e912a710c63399fbe86fcdbe4c41fd8b8f34b99773a94cb02024e9ec64c38aeea68ef378de4f842355

Download Submit
/data/data/mob.play.rflx/files/back_dark.png

Filesize
1KB

MD5
74860bc33c04b72a4848a5d7b97bec5f

SHA1
336856eed4d49ebd0d429877822ac5781b4a18eb

SHA256
fb479f88bc809d106fc15c465079b19f6027a01ecbd0d79267147c0529adea69

SHA512
9b6993ba917c3a687b0df03deaf9e5e6ac41d3606ef148e259eb32de8c41203249063059a11bd598b860f2e3d795c73cd339c5325f80a2623745e7003f6586aa

Download Submit
/data/data/mob.play.rflx/files/browser_icon_dark.png

Filesize
1KB

MD5
c954c504c75c8ba2b112deb64869f78d

SHA1
5b594778f7a5bdac4e41de2d6c81225d5e329e0f

SHA256
37ee870f153d26b3956abcead4c45160b264fde6ca016bc2d330e9e36060ee46

SHA512
af1705681c3a2ef83427c853d310bc2dd6159f5db1c1b5a5740431a5a928b4c6541dcd5e3fcffd6c06697b87ca740a0ce2473e2cf141f21ee13730f325d4403b

Download Submit
/data/data/mob.play.rflx/files/close_button.png

Filesize
2KB

MD5
4d332a5c731fb506bb4644c91c38f5fc

SHA1
56fdadb5d38b29161910b3c89ce57b1aae67733a

SHA256
43e7ff284e786cced9a54218970d357ff06374836bc1791eb63d9bf26c6a3784

SHA512
c791b70329e32559d99f0259b38a832bc849768cab37973567a04fe8f66e9f5477136014ac17d16d1a0df0ca0f4fdad86d6a5f29581c85068b7979fb9e73b7c6

Download Submit
/data/data/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

Filesize
33B

MD5
35b51faac8b5af3886e70bb5a885dab1

SHA1
e6cb282da46cd4bf113e25c8573268578dcd11b6

SHA256
af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b

SHA512
6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

Download Submit
/data/data/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

Filesize
75B

MD5
944e6a5a08cb971370c65c06061f0ab4

SHA1
84d47725cc29bf167b782c702575bce4bf2ecc5b

SHA256
ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab

SHA512
bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

Download Submit
/data/data/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

Filesize
121B

MD5
ffcbf87665a36fc21782400bd0537e79

SHA1
3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee

SHA256
a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d

SHA512
7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

Download Submit
/data/data/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

Filesize
163B

MD5
dcf7d6c1cfd5e7b56074e3001577c78b

SHA1
b8eba89aee9f6688ecda6675ef8ff4998da0b141

SHA256
ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91

SHA512
42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

Download Submit
/data/data/mob.play.rflx/files/datastore/firebase_session_settings.preferences_pb.tmp

Filesize
212B

MD5
9679a75da6ff92cfb31f9cad50cb56ea

SHA1
df30876fd7700dad16701a4f7be58b4df69868af

SHA256
d68aa564182fd41d4123c535a092cac47ee37259765d599b5b2e1b9386a18169

SHA512
84c679ac38088a8e508d2f4e2e95c00b9dbb8ff2ab839632aa973fe19ca42723fcfc750fdd20af0f9f5a0432c0fff075055a7439e945faeed6ce26369b6be34e

Download Submit
/data/data/mob.play.rflx/files/empty_star.png

Filesize
882B

MD5
136e73ffc6805e043bf61a12b3755b1a

SHA1
b7bd8ee6bd46f7bf3a2f21879e71ff4684e56361

SHA256
ecf9d2a4448842086066d82fecd6ec372497298bfef3c8e3fd17a97187a3e7bc

SHA512
62a12a8070955026e27e6c146d46bc44a345b0b4752e1c45487f06224e11c42490344b259ee6fe51fb6e9847cf4146abd7d4fbd0274d0f2c532868bc4be5d527

Download Submit
/data/data/mob.play.rflx/files/filled_star.png

Filesize
740B

MD5
4ef85932c17e863921c9bbdf1394fe92

SHA1
f3811986d3648be1ca89162a079aff4644fe26d7

SHA256
0d6e7d7a915944adfb498a45a6db96efc77d0112ba1f374461868e257315dfa3

SHA512
1ba7939efbd515f81333a155064e248de27b2c70cc71004136ab9d3c61ad34baab7f1d00529e1c78d4cdf11deddbad2376d27d5ab1af699a9d29c5b5da7f4db1

Download Submit
/data/data/mob.play.rflx/files/forward_.png

Filesize
1KB

MD5
795fe2fffc9505398b787eb2f15f440e

SHA1
c124812df2fbd8e4a65fb104aaab352ba300a57a

SHA256
976cb8c0c715b0b0e8b4769b51af1a08f06a4823d69b1f5284fec4531da21fb7

SHA512
c698c060692567afea47446d58d32e92b0bc922088c99e175f5125b264c20d425fe7dddc4b0d70fe9f53d41cfb87ef52965cd40934f21c9f5e2b9281dee72389

Download Submit
/data/data/mob.play.rflx/files/forward_dark.png

Filesize
1KB

MD5
ae1702688d33694b08e2f990527fd179

SHA1
fccea348af9e98608b152c1e35307d04a1cddeb1

SHA256
87916bc88b54b8602b2f43695d34b196b5cc8948ccb6576b24cced2feacb245f

SHA512
aa0aa7306867900ec765e0645e2666ae1a913fb1bc67ba205b3b80d1b37089bd8692c2b34fca233ed3bcfe89a42f095a375df787d5c29ced86bd040981110d2c

Download Submit
/data/data/mob.play.rflx/files/half_star.png

Filesize
881B

MD5
ba75be02cd7e410fa660a1783b0fff3c

SHA1
b5b60389112f5c6179878423c6c97eb5ab1680b4

SHA256
77a060cb9e3f9a5eb52654135d00106d36208f3d38878ca3b752ca1af85cf42d

SHA512
9985e466e1652eed843a9dd97832b8ee9bad05cd591a4b17548e876ac65c6cfa4da4f46e83dddf89f9fb1924d92dbf21ce13e66059d5cc7dbe0500cf0c0e7b0c

Download Submit
/data/data/mob.play.rflx/files/logo.png

Filesize
2KB

MD5
5f93b7b61e5bcf973fd93c049061023e

SHA1
7c154666967abc13d9d38c9b79eb6933db64566f

SHA256
4e537f889054c9f1dfb4b1a30c34ea180310dbc9b9bcc9123605f0f802a24557

SHA512
d96bb4c9daab3b2a72a3d82682a8f66ee85a0eb525a87afd13f46de949ee8a02d9a560da6584ecd658681c93a13df03d9a0f57382fdc40f56b2541a51e858a67

Download Submit
/data/data/mob.play.rflx/files/profileInstalled

Filesize
24B

MD5
923e8c206e12345dff7eca043da55f39

SHA1
cb0aebeba580eaa772ef792deef1c711f5f8ed72

SHA256
acdb9c1fa5c01186d2d00b427fb8d874868eb25c1d6a8ebd9df40680777aa5c0

SHA512
64476099155ccca87c1b67b324ba361298700350182d0ffcf0dabacb67ab083d84b6ee5021c8c54945c9780d728a8df84885f81cbfca6fdf359e875cc76e523b

Download Submit
/data/data/mob.play.rflx/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
8bebcf35e41d85b42383cd4843a8454c

SHA1
373cf730ae6f0642ae0272ea0f9b60e249793822

SHA256
1f3f4e806d378f4ae0050312ec76422afa3c59f17a275d7a217c74c159fcf45f

SHA512
7fb81708e8827e6adb9b47bbf272a29f5446f2eb4d44d5038b9fc2b835a1a169454e9756e39af06efde35ee94a09b9217f3027af968261cb632168cc199a4c82

Download Submit
/data/data/mob.play.rflx/files/shared_prefs_sdk_ad_prefs

Filesize
153B

MD5
65026ee778e1372d9f4aed742772e893

SHA1
5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc

SHA256
15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c

SHA512
589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

Download Submit
/data/data/mob.play.rflx/files/x_dark.png

Filesize
663B

MD5
2e42562e9d02dafe67ac6404f58289b7

SHA1
c37072894b2169be2643dd5e541ff8dfccecebe2

SHA256
2f70939006596d2496c26284508e70ef260968eae1385c220e91e74b58e0d13a

SHA512
a65a9fff0c6e17c322d0f0d6e0233fcca6d701a331a0fbc7da7eb21474c11875bd0e3edafc6c1df248ba85f22fc47b403d5668316405adcd8f6e4907a893d3bf

Download Submit
/data/misc/profiles/cur/0/mob.play.rflx/primary.prof

Filesize
2KB

MD5
8e1f9222fb599ad3bd0609c68c453e97

SHA1
c6f1b2b173917844eee1519f85572faca81bf2d1

SHA256
d632bf8f2047d9a3278120b2f35ad5960a78f62ab8bd8b8cc04832857be39bd3

SHA512
f7656a5f4e0eb97d920c65d5a402d6efe64278ef9d3eaec835830f65723b71ef13abcdf97fb07012d5ef4c4c00c56a6e266fadf42624f5aa8bffacd39bf8bead

Download Submit
/data/misc/profiles/cur/0/mob.play.rflx/primary.prof

Filesize
10KB

MD5
825020b2dd34a7dad3a6287980239f5d

SHA1
420f97c7e2d7638d1ad84ee4a108008f934bf01f

SHA256
1b97b78c194adefa6b3f29974d818802482f2af76c518035e59dec75bb44f434

SHA512
ee37116d2dc03ccd06279bd451b3107161b0af4bd1db966ac3be94d771c338a9265dee4429e82f07dd2364a4e02c103ad9cdc80a495d4ad8cd90f945adb19416

Download Submit
/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html

Filesize
2.1MB

MD5
60613793d0bce882b80f2429f3b50edb

SHA1
48b22e5a190e572e9014a10c4a4543e57f2cb332

SHA256
92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54

SHA512
81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

Download Submit
/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json

Filesize
719B

MD5
d165470950d875a5ef05e52b16fa2b71

SHA1
8eea6374a2f17e04a9265785fa1c805c4c3468dd

SHA256
ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c

SHA512
41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db

Download Submit