9ca1f601e4a014349e56f6cd07f44d0ecf2d0d2bbdf75841257714161b61c581

Analysis

max time kernel
307s
max time network
323s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
21-07-2024 11:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Eroflix_AF_9.9_Hifi2007_SpydogCustomMobile_UserUpload.Net.apk
Size

4.9MB
MD5

1bd1d28f5db0da9772b6d132f896c74e
SHA1

3356eb73ee99cd4133e19254ff337c1acc668f9a
SHA256

9ca1f601e4a014349e56f6cd07f44d0ecf2d0d2bbdf75841257714161b61c581
SHA512

ccf8daf3e427f512963222f51f49d66d1d0952a5eddaa6aa2d976bb3217c4f2ca4478e3915c09cb45531f23badee18e16da74c2c1f179ba163cd9a0416d60cb9
SSDEEP

98304:UM8tDYRpYWx+qjcdciLBWThdotdyd6v1FNoLp84hOPFOB:b8tERpQqNxT3o3lv1iOPFs

Score

8^/10

collection credential_access discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

evasion

System Information Discovery

T1426

Processes:

mob.play.rflx

ioc	Process
/sbin/su	mob.play.rflx
/system/sd/xbin/su	mob.play.rflx
/data/local/bin/su	mob.play.rflx
/data/local/xbin/su	mob.play.rflx
/data/local/su	mob.play.rflx
/system/bin/su	mob.play.rflx
/system/bin/failsafe/su	mob.play.rflx
/system/app/Superuser.apk	mob.play.rflx
/system/xbin/su	mob.play.rflx

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

Processes:

mob.play.rflx

ioc	Process
/dev/socket/qemud	mob.play.rflx
/dev/qemu_pipe	mob.play.rflx

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	mob.play.rflx

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	mob.play.rflx

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	mob.play.rflx

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	mob.play.rflx

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

Processes:

mob.play.rflx

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	mob.play.rflx

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

mob.play.rflx

description	ioc	Process
File opened for read	/proc/cpuinfo	mob.play.rflx

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

Processes:

mob.play.rflx

description	ioc	Process
File opened for read	/proc/meminfo	mob.play.rflx

mob.play.rflx
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu pipes.
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4473

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/mob.play.rflx/cache/image_cache/15bfcd23f629d471104dfd0496a6484dc41ded7ed9dd454bca760c799201e723.0.tmp

Filesize
989B

MD5
c83f9e73b016bbb8abb436a92b0e1510

SHA1
5249464b38cae34a0fccc794f91511cea8a7ce96

SHA256
5accb6d821791cdd427cf050adc57dfeee992af99fb7723472bcd49e7f1ab7ec

SHA512
1191f4ab685da64c12323a98fe2e0c2cdc9257b11d4b5a2f247e110b5d66ec125e0f48552a3fca18b42b812145220361cac5b248bbff966c8fdcd576c26255a3

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/15bfcd23f629d471104dfd0496a6484dc41ded7ed9dd454bca760c799201e723.1.tmp

Filesize
606KB

MD5
b2d0062d5f894d5158c509d1b697824d

SHA1
3862a6688a4ddd8bf4871a8ffa60e75b8fa2c998

SHA256
2061cb6790b06ead712b93651c3b1bdf7ce99ca2e7bbca8ba673c47f2e066820

SHA512
a81967b80c6352662e17a2c94a5c3cde9e037d4528ee301696c21965745810bdac438eec2ee224bca7feda39a7b8929b9e3eb7ec07030b84a14e5bad2a878284

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/42e95ac2dd755474aac8bb656608a6f0ff0237a20c163002c70ef1647aec3fd5.0.tmp

Filesize
989B

MD5
02397ef8d455797f80e8b589f6faf899

SHA1
477f6f8879104591f1d5e6d274eb17626f3df678

SHA256
946a05ce6b7437eb5790563d71fc4ac98fce6dc8118a50fa0099386b9a573d93

SHA512
c6e34ddfad3d95ec476c89ca28a71671b52bb8333436776a9c2562fd8ef424485f5514345a0d1f0b2a53b7b2ab256dc7f93de4ac881e057f7035211a2c432325

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/42e95ac2dd755474aac8bb656608a6f0ff0237a20c163002c70ef1647aec3fd5.1.tmp

Filesize
230KB

MD5
096598c2ffc9a7c0f45e7b527a8c6687

SHA1
16ec687583bb567108a68ec3986be270e56e3e03

SHA256
688f3da950ba10cee9377e424ed7e053f496fc92ceb4efbb75052296418872e9

SHA512
fa004df3c963a49c2d528a092f4728f1b55480cec8a5efc2f708946da16920a0ebae48093bf213e98ff9b6ee70ef317cff268944be958574e48814090af592c7

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/7b89eb2f54ed6b14a944457f1c8eaa0daf78136ef77f03242dbcd2dfd5c3c159.0.tmp

Filesize
828B

MD5
2acf95a0a6fe698faa14ebc999498025

SHA1
5d40b60a9b9b740124da8c4f3473c522c526791d

SHA256
b8fd14e90939596ed2c6d3ef48010dbb7f88cf58218a19b44d40448f638b522c

SHA512
61950270b92c74f4d3772d22aee6448b043c9e2d226c4cf3b2861da11ba4dfd38f1d0410f98eefec97e32f9d2d8137dc18cfa8e77ad69834c8140c39d179223c

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/7b89eb2f54ed6b14a944457f1c8eaa0daf78136ef77f03242dbcd2dfd5c3c159.1.tmp

Filesize
61KB

MD5
0d63f8e422261dc53ed486d0a7e52488

SHA1
fab429e6f956f48358ffb3db49c0a7eaafa8f843

SHA256
0c42577eb24a925829cbe8bdfe27221823ccb53298c30d5d5b477bbfd42838c1

SHA512
2351ae4a33035cb2328683b026c730deba2f09acb6d5ab445a54345b2ff551a87fe9d9db37ec56b0635538afa9336795aa7b2719769660a312175a91c978870d

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/890fcf7d59faccd6ec365159309a7f9be6d2ce23d2e4114fb7fca00785969701.0.tmp

Filesize
765B

MD5
1273bcf4d2a382ffeab9f2977161616b

SHA1
831910cb5e87c939d354fd51eb06a88fc7fde5b1

SHA256
d6caaef5d08123ed07d62bfefb7ee9563963cfe10f46bdad73390748f41b2a6b

SHA512
eb178f32e1793a6af355b40cfd144f3f5405d49e2fbbae15b5a8f02e0879a3666db51b5c287a1b5f6069fcd19c1af3aafede62b68520bf50febd4a53ce80a0e5

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/890fcf7d59faccd6ec365159309a7f9be6d2ce23d2e4114fb7fca00785969701.1.tmp

Filesize
43KB

MD5
fb99fda7a29c4877a630f86246f58670

SHA1
5a0c1fe5fbb72e21aa6fe0787a4120de2228e856

SHA256
f24f1c0e0af05b904ce5637a915091153be736c9733085b90e416d6481b9b506

SHA512
3753d4ac50d64b2a746cb860b59c1aaed53e07671f3d63cf119bd024e8851d342085671236839981a481d43db7dfd25e1dfb7f36b26dd93d5c611e2da06e3a20

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/a4f77a25143bb86c5602d3677514c7d920f8d4bd02d3e3486c4eff7392ef9f35.0.tmp

Filesize
829B

MD5
0f45fe7b107579fe9da418e9cb72181a

SHA1
81b7d0dc762d894d7862144283e2ce0192de8fc7

SHA256
6e93d010e14bdc218f6657c464cd411bad0af326346379cf9c7384c9a25333c1

SHA512
c4ee167102315ec3d8cb8b47e0d2263a3dcdc0838360a40816948388ed96217945e1495e5ebea55d450096f77841e23cd6c3a4ad1df1bc1cb8d216e20b6a4132

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/a4f77a25143bb86c5602d3677514c7d920f8d4bd02d3e3486c4eff7392ef9f35.1.tmp

Filesize
74KB

MD5
b0d61eb92a62e47d136f3ff0e587d98b

SHA1
b44260a1bbd4f4df32ba83a71a6f32f2c6c826f5

SHA256
35d97f3c6ca6f81ac74a25c1dd54b1631e39476374b1e17e6d15f731b8c60e16

SHA512
97f42095570b4a775266f638c6e8177ed1ebea8af961914ca95749629019246512e9858e8ec2bc2bf318015fdbd349c4f3ac76541b97b117f6a7a9909a9c2a1e

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/b9faae9f44453e4fd7ec27b35122089fcce2367cd760271fd275983094d28119.0.tmp

Filesize
999B

MD5
d5a6a1f12555dcc8007571ca37c4599d

SHA1
134585c2a044949715ea5fc5aeee438e191081af

SHA256
838a7a43b3378bfd3096bdc4db199a0891db4e9b9ca1d822557df391980c2377

SHA512
f0118a3c063fe3ed4ef5ce7a26754fad6507c0c186201492f3386c1d85dc713ca1fd004a5464b8d3846ed36feffc9b4aa61dc4fd6c9a4cd345bcbbc82e6bec7e

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/b9faae9f44453e4fd7ec27b35122089fcce2367cd760271fd275983094d28119.1.tmp

Filesize
23KB

MD5
6b91ad27e143d0e496ebe3ad5af736bf

SHA1
948081006d8fa198737f736737c29188d778049a

SHA256
d9ad550f6152034dcb3c6a4813ccd1fb81a1b415a0b8d80be0f268cf48a8667f

SHA512
5790ec5593b21569b1d74a2caf712f67dbf8434a856b50b69b1863cd3cef33afd643f0490410f9b477289699fd6734168cb70ccb4c4a03c217f5f275fad0f3f7

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/journal

Filesize
1KB

MD5
12cd04860de7b967365389ccdcb4a188

SHA1
5e253c144f713fe479cf47f838bbc98c89eb75ea

SHA256
95c2ca8e5d6754de9698ec42d512dadef274a049d767e35287141bc3b0101511

SHA512
4f74766c28384e961b99320bf27251c8fa32416cab5f76846f57b356ba6b79b988ecbd5baabb57338ee9fa82d6c1b6fc9e8d9f446630f038203ff7b62d4c39d3

Download Submit
/data/user/0/mob.play.rflx/cache/image_cache/journal.tmp

Filesize
31B

MD5
d6ac8c8db0504502d7f0e057a78c5ce3

SHA1
8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4

SHA256
8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a

SHA512
100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851

Filesize
16KB

MD5
83663c5105ad6197c5e71401f018e669

SHA1
f58695aadfb50052bc09e25f2f550374cabf224b

SHA256
44c13eaa042e183e2594580608aa9b299832ae486c49c3d71e5ec9e7bacf092c

SHA512
8252810985ed2473a0a65e6131b62aec1a8f74c0cab1f5dec293ebaeabaaffd762807300353163d13758092f8837149ffa31fd3fd5b83b93fbac6de9c018eb5e

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
512B

MD5
c958781bd2724665bfa0b95630edb4d2

SHA1
a96f74a0c19f20a5b37e55ac9d1f8e8a20943561

SHA256
72bf605333109e16037375b2162bd9e3c61dea28e1e8a55c6af524bab6a85548

SHA512
8003cb0800087aeddaf95efd1c6d8690c919bd611baf86c917fc0c5fa3a5b37febac7c62b3fe9be3cf74f1c387fd1d3802e3e1d5d6f2c4276b25f55049c138d8

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
bcaaf6e1bf790f82532c69ff46838f9a

SHA1
c66e00b15235c616efd8dbdd085beb639b721c91

SHA256
81fbd3789965feb3ea09ff441a8c71dd7943e15b9f38d737ef098b9dc745ce41

SHA512
f5a07b4c6ca59ffbf383f2eb0a0a3035c8c8966f7ccb29ce464fd4514630286b8081862e631bf566f2f579cf84d5808f081fa163bde613e27de9c82b598bb09f

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
216b59a8012e4f213b80245a741f87bf

SHA1
a06c7c11ecab46b91dd6f2c270bd9b9cf43887ea

SHA256
548a3edda75db932d6d5a156f093949fea5fbea2af98f5811b6d7462e7d8e7bf

SHA512
bc60b20580f186fe8f2df248362567edc8112b9a9bd7dcdb21bd1e473d1dda1738bb4a49b3eb4acbde38da9a3bc2897d351862cfd72af62d2ea0eebf03d89d47

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
0fbf2ba225c4583645e73033a30d4e38

SHA1
9b449ff83aea0379365d8f4d7f0a4f08331a6610

SHA256
2503919e0a6f1eda04a12e61bc8ff07a83dfa7a9ee02bbe65c4a82f0fe7ac0e8

SHA512
f6f1184e144fe63ca7fd2236e17d210fbc51b7b8e72089ea5dce88abab82531966a2cb333cdb1cc47643f059aa443df9f592e8c15b1cf56aad49f6168dd38f2c

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
d31ba15b224549d8de43b3d32bc9b27f

SHA1
d762bfd9cae86c1b015261129216c4e9ab913a19

SHA256
01ad68cc26b509c91d737e577ef770190d59bd864db40f5b2987dcc44ed7b11a

SHA512
bcb7a8bc7577d78fe7e758174fb094221465f3d1ac28c20ed6464171673ca0f1267b619aaecbf0c861334bc6efaf1f7f5f0cca907d1754633c729b6f72383dd7

Download Submit
/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
5ac727a0629615991d5011efada8ac0d

SHA1
2919edec51e3f8da23ed7cd6aaaad25b1c3ad6ee

SHA256
be1893dff828d9e94e681590ce1961ef89c8885edd7f7433ce50d78a1359eec6

SHA512
6562c03cfee0ecb14beca30ae75cf4b4b72fdae64c6309ea2c939dc5d5d085ecf737fe59f37eb0fd229c4137b88896d61b22101a2f852518784315a60f78426d

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
82042bb2138c287085584c0d9db98381

SHA1
4ef2c5678b0e53f990ca9fa1a4beebc3f539ba8f

SHA256
34d3c5fe932e35c886ec9179b59fef731122f4b7135e14b5cbe3ad1603087fbb

SHA512
b0c39f45bf708cb1269ed32c90878b8042297674367e1cd5d3c06474ddeebfea970c896ca66a36248fbd5fefe4d8a15c4c7d1a4f5985b567a15b734974016b08

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
24KB

MD5
07d0adee53fca5f7b8253bff618374dd

SHA1
167e931fb5bb64f0d3dcc91f6223574ee07d8dd5

SHA256
21ce1d8cff9343e5e4695a2dbc89eadaeae8e03138496f6ba7ce5681b8dcfbd6

SHA512
c35a6ed85d2fae313e8777cc266f49a6f84f904f643fd2aa55ca1d6c104a48fc40bcef4217706e3ca380aa37889696774c54770085939fc2caa3ca9d9575dbde

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
f75e25b6af0ab663764946c0439bb08a

SHA1
6525ed1ab775a1b31472af7606c05f0af9741149

SHA256
0057b2e6f99c7beb1804b14b110b8f1606475afb12e2aeab62266c95c9e78c77

SHA512
b998f7404cc074e42aa50ab0f9b0970e141c31e52d910a0cf7a94ae0824398927adf58f2e2c20065ec03d4f0c9d5a5647f2824762b2edb12e054e7863286804f

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
e62f6700fcb360376ee7116b7b57702d

SHA1
dd1cdfa7073df1709f4ff6a43226ea735ca2d0e4

SHA256
438fc0212e61ac7c60a5b55677fe04361172c514de30d45486139498ea73e1b4

SHA512
a1d4fc6e35cd803d85a7164d529cdfdfaff2b38b3e34c2faf1da8bb66b748be949718e2a87f327555d0f95b04c789da8e06e767347314967f4504c8fd90934c4

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
16KB

MD5
f233c9d0246ffa4b5fafa95af7094ba5

SHA1
f3b4e45f1929346fb1eebc3557923bd459cf81b2

SHA256
c3d147b414e8ce2fc020dead2263d2717c81e6ed2f2b32750a7c604090242aeb

SHA512
5da34b094b52b6fb6fb1487d92613658da446b732e63454a40102593d935ec0e0e5db8f4b87936abec0d18dc910ad6b5f71ce0e6d3c91963233759fc18f92866

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
20KB

MD5
b4cd0ca77dcd9bd668a003488983e7a4

SHA1
f951221935c6f8eb4c4b29e836402be2685dca9c

SHA256
50dbacffbf3cb4feb55e00b7518a41d0cea3627d51faad087bd8cb6f76ac2d94

SHA512
a348025e4727c70226c358a24cdc76ff5def63f0e57df68ebd55ac009177a3d363db185e14da3912e56e47bc4ea1d77a25d5c5e6634ed217c134145ec124559f

Download Submit
/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
9b07c0d9fde6cce0244aecdf6f4433a8

SHA1
309ce320320cc8ebb7b8f90eb66c1b481cf3471a

SHA256
fac81a10afd4bd516a6e975f3a938f15d7bdf5eb6b7471d86272a79bece846b5

SHA512
0ad69dc38ef1073f008096356dfdc61307cd2e8921246570c92bb17626fb75c6e6e227a69fdfe3256db01b9166021fc421f6f99040d1f95d62c0b3973c3316c1

Download Submit
/data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF41F0182000111797AF1D4C4421D/report

Filesize
783B

MD5
13dfa73c08b7e8d6ffd7ab88ea9477fd

SHA1
7e3d597fa366d6fd29e1a4667b5f977ba90786c6

SHA256
c9320b7822437f1a03dae05aa66a9354696f4b478e4b43667345c11f3830bf09

SHA512
e5c03695f4fe910f72542ba9bbf508967aeb2bb1ad1e7d62130f8973261bf14ee85a46f78eaf2db6dd0f0dd2c84e01171774a79f3c9e75966d9fa65fc8923453

Download Submit
/data/user/0/mob.play.rflx/files/PersistedInstallation2326143534556251182tmp

Filesize
569B

MD5
3d1cd4b20de71f55048660ac0782bfea

SHA1
f6083f04d139a96e0429d3cd17a8539473afd59d

SHA256
878a7c060faedae76435a8008282c032686d6945eabd65a563492240ecd0f0ae

SHA512
228783c3cf0200ad316f937a8ae76df42ec6273072a99f4a2041bc9a8f4cf9c769468a8e4c19e5c0d761ffc3849bfa4488ca79cd8539101cf26f027db83481c5

Download Submit
/data/user/0/mob.play.rflx/files/PersistedInstallation6672102116312652977tmp

Filesize
90B

MD5
ac05aff1fdbebd0eacb3e239d508b2f1

SHA1
06cbbe1eff56bb7e005371c917ab9d93bd5b3b09

SHA256
79c758a65ad428ffc861e9f89dd9529b6c483fbc6af6499271cfa8bfa4189b1f

SHA512
a9e1d18c402d71f2be5982b0c1ea7517e702b473355cc7b2d11f560e1145bf974eae1d27faf953a710d0bdb8e583419931e73b280c01949f4d7b831b2d647e00

Download Submit
/data/user/0/mob.play.rflx/files/StartappAdInfoMetadata

Filesize
1KB

MD5
09215b820396153668dc0058004fc039

SHA1
483d50a932a1abbbc1d848c9a956cdc20bb6e452

SHA256
54ce5572686a2f40f3a2ce4b492a8907ee77de32db9b4fcc6154535c5580e2ce

SHA512
6b8aa4357e700dba1e944a6648277492b7e09122745efdc5fba22a94da90d9be4a4fcdbe5454b4a66b5bc0538011a9a142aea14572550aa1f42f39e612099347

Download Submit
/data/user/0/mob.play.rflx/files/StartappAdsMetadata

Filesize
2KB

MD5
c5ec03049f2a725dbe8dff5598ea7afe

SHA1
3272e70169bcb264b8072dec2dda5c2d2f7432a1

SHA256
8d11f72942817bf46c3b47ba9e7892b70b5ccee1e01116804ac1d5b683c48840

SHA512
8d0134a29ef6c20c39e755d4d36fee2c119ae32d6f05d1d62c8ccf116756f216e8a9825a5cfdd576576d79c9bac33055b47216efea7dd4f966a14111680588c6

Download Submit
/data/user/0/mob.play.rflx/files/StartappBannerMetadata

Filesize
797B

MD5
1464bff0fd2bc323b44f3019e32e43e5

SHA1
e723343e3d4bd22bab0510ab4d1233e346b4a838

SHA256
5225c5f27e665aa4efe233d9efa63a60e7a62171ed33c1667cbb5bf6b92e44a3

SHA512
dcfde2c757c5b83ed0060792c6900f1e2614410a2441563d2bdbadfc24326f73f2fa0fa7f2b7bd4555aa2a2b03c15e0ac3d28ad4836e0fda5484f00f8f2eac01

Download Submit
/data/user/0/mob.play.rflx/files/StartappCacheMetadata

Filesize
978B

MD5
c41164d8f5044093acc85a4f93b1ca1b

SHA1
2001e355baa615da01da5bb8b60c88f64d0e57ff

SHA256
5e478ae54831bad55c4dcda78db4fa071411c98ddf9d057ff557a36b1cd9c3e4

SHA512
3812f2c85d4e24df3e68b0912a2dab1d1fff198ae0cd8c238e925239b19a084cbf2d58831bf5897ce764029f28bbe515b98acfb940ce985280beb9cf6251c57d

Download Submit
/data/user/0/mob.play.rflx/files/StartappMetadata

Filesize
10KB

MD5
d36d8ad67affc49903dc7445cd6c666b

SHA1
b8dedc31d26a780ea57974e8ff88e3e3dd64bbdf

SHA256
483b4e8be52c3daeae4a53fcba4ffb6d0adb742631f728a1e638691b0df97a1d

SHA512
35cad52c5430759079eb689b4e2fe556b14ab2a22b66ee8f545b9c2787614129bcebda546bf61d05899196b3d0f204bd6f34c7fcd2f86547e15128ccbba6a95b

Download Submit
/data/user/0/mob.play.rflx/files/StartappSplashMetadata

Filesize
1KB

MD5
84d44d07ee0cd574f5c73907b7a6055e

SHA1
19c7bb2bdf7f98e4ec69bbbd94981fd6ef8966c6

SHA256
e0a6705cbbe7af1c15e10c45b471bfff79dada9044f17fb7226c8fb6460f7ca2

SHA512
d8ecf9b58cb4aa25d14be75bdbd5c941dd5ecc98b85edd26110f93da78b552d3264b5458ae1e26a489f66e0d4771dc147d8afc73b6532a795e6457e27aa27947

Download Submit
/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
57B

MD5
0b92eaac425276de1d765adc87ff5f19

SHA1
1448dbd4b7ca7982cc8f74dcb0de036ea93c68da

SHA256
cecb1b569e96ddc85e2d239fa298c5797ebc3181a14acc57e8e0f54471232376

SHA512
e77485c2ad2c1474d37d13f4857bc1ccb9dfd9851cf18ef2587f1f076e720bff52b1dd20e1bd6c87edb06b3fee95a572d4309d5fa15fe8456fad28b812006158

Download Submit
/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
541B

MD5
425606fba2db5414424043217c85dfa6

SHA1
df18f2d97679117caf0609f54e553fafca30c27e

SHA256
38b8aaaa5c5a94fa6fefbed41108a4b797cf9862d768c2317ddec44e3f8197e0

SHA512
47916b51952ff096f1aec831873abdee31c9c03f6e7f2682a323a407d6da5e0f4f8a22c1e3897a134ed2e7454d43c1853ec424d1414904423a64930dfead950e

Download Submit
/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
676B

MD5
297f51f7fecc241ced926c3da66abf1f

SHA1
1dd9a2669bc5869169fcc0d6aeaafb22657410a6

SHA256
87761e0a52019b1bc14913dbca5fe093dd106515160434007ad06bd1900abbaf

SHA512
5159e2ff2c2219febab5cda581ccab627fe457738c4c52efc46db2fc81ce00dfe1cfe64f1869442b8b8a51abcffcca7d06c044d0f5faabc4ff58bd6db834002a

Download Submit
/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

Filesize
937B

MD5
4b5e6fd8f2bc54acdf786e6a31181093

SHA1
a34e941440a6273c5b37c353edfe928bb900d6fc

SHA256
17a6896e38a0b7cf6dbff0d3179b24eb4738170d29ed5378c47c3b0609e0ceff

SHA512
aaf94828a1ae9eca19998cb891cde2c78474b9de7dba97722f83abe0764cb8db10ebbb40cf2582296d6d8bcd172d42721b61e88b4f02fbd6c606955f491a222a

Download Submit
/data/user/0/mob.play.rflx/files/UnityAdsStorage-public-data.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/user/0/mob.play.rflx/files/back_.png

Filesize
1KB

MD5
ebc06fd3d86c27a426932a83325eeffb

SHA1
461c990e677114de3baba2a33f0a60c0a10bb9d2

SHA256
ada010f03b82133ccddb4ac69a7c81a1d507121ef1d276c7c191bb55401c2230

SHA512
3b3c682dc3876f7c813bff1a38e53e0c20f6c776eeb8362a8a750b81d0a3132a207b01740a493c61a03261748399e020aec5fcb7354c723e4f5703efe5418b2b

Download Submit
/data/user/0/mob.play.rflx/files/back_dark.png

Filesize
1KB

MD5
355eb0af21063fefca005d93d6afa9c9

SHA1
f854e3d2f0c0470a54e55f31017f9c499bd3671d

SHA256
b50339f939827a8e5a918ee4ed1d8213e27f6d546a98313f90449b27a1ebc00d

SHA512
ffff59e303636383dccc1282dea4c13b8c46d9aea1d646d745f7d26607cfabc25aea8001af873942749129291abef5dc5a858e7360cbfc145f870b80689b34e9

Download Submit
/data/user/0/mob.play.rflx/files/browser_icon_dark.png

Filesize
1KB

MD5
cac9a26c27728066be7a285defc0df6c

SHA1
9931d42eea7663aaec4eb901bcf279b246c19e34

SHA256
9347cbd8e6e2af4d09759e55b7595474648619da07992d6485b9756ab4d8170d

SHA512
11a3abfc4558e6c887f1f809a3837ffe6f4c1702407db945319acacaa5e677f6b117c07ca676cda6438639a1ebc447a2993e0ff31be8ef797bd219700f508ba5

Download Submit
/data/user/0/mob.play.rflx/files/close_button.png

Filesize
2KB

MD5
2d858e8af5d9426fe061df5c82ffa6ff

SHA1
bc1b2eab876aa221b6449d11e482de24b777d58f

SHA256
73d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835

SHA512
aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c

Download Submit
/data/user/0/mob.play.rflx/files/empty_star.png

Filesize
895B

MD5
76ce13c6312eb334fd351e3b5cff4bf4

SHA1
203bd863b812c071ab3ae25bf4ab2f9c4d42942b

SHA256
f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8

SHA512
d06ba34786090e3b027670a17910d2e35f48eb7bc639e6da1d08214534215797dadd1a56be44422b176801e5d1a1345cd2bf29e73acb6a49bc9a2f7670710783

Download Submit
/data/user/0/mob.play.rflx/files/filled_star.png

Filesize
753B

MD5
317f802aacfab6282b8f74f280e841c1

SHA1
3b746a76f6322e97fd6c09a43d03ac14631d93e1

SHA256
f37f9a17c20ca3068f4f9db08c262c62b7b86544532f612a78421bdee92f4196

SHA512
a714f902ede615507cef840dcc03a5eca183c21c82cc419a924587f38b6974f5aa45fcfcc2bac4d6cf82b81d1b6ad452540e0581751bfcad72e524c83757a301

Download Submit
/data/user/0/mob.play.rflx/files/forward_.png

Filesize
1KB

MD5
9ee047a6801bec9459a9dd5ec7068078

SHA1
1aaaffc208e2d86e53fc031e8413169850e65746

SHA256
9f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12

SHA512
8245818df5ffe06c8f369c8d77479f9f2163d10dac36b0e37c834018b713dc8b063ec1de1862fe16a8c1a769b496652be880ddd48d6fcd24ad766a395bc3ff24

Download Submit
/data/user/0/mob.play.rflx/files/forward_dark.png

Filesize
1KB

MD5
12bfe20382337a84c0fc004a52b9ba9b

SHA1
ead15f7ef372c16f78060b8f8c5fc6e0ca6a96f9

SHA256
621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5

SHA512
7a346febc49154dd348be77f88c6e7ed5c7a531c2fed981f12c40e22a19e4e1a5c51fa766b3122898d97f05e1546a6f2a29b598b0ff441cc7de5e3c505aa33c4

Download Submit
/data/user/0/mob.play.rflx/files/half_star.png

Filesize
895B

MD5
a40e6a567b7aef329bda0ac200f7a23d

SHA1
2fa463649c7ba586b28670675a15e0d7a630c7e0

SHA256
ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556

SHA512
5e77ca21445a09aa903ca08c10c1bcaf769d8273368b7981aacf1bbab08cefb7a521687e78d280828f46b625c99fde02050f5c914dd4d07fd742723f7713ee4f

Download Submit
/data/user/0/mob.play.rflx/files/logo.png

Filesize
2KB

MD5
45c24a8686a0978086c99f7039accc17

SHA1
c63ae2601322045390c7a4f230602b74ae18d2d8

SHA256
bc9c4aa36a0dd7efe16a8b3bca9172d970fd13d70d3e718aad17a78269079912

SHA512
d5861c64b9dc9139904c3bfc7da26fa6f3d9676a5b4203ad617c661d54d3716508fb02f282f5c204bf9d6a0c7162bbb565a44f2ceb96d825177065818b797727

Download Submit
/data/user/0/mob.play.rflx/files/shared_prefs_sdk_ad_prefs

Filesize
153B

MD5
65026ee778e1372d9f4aed742772e893

SHA1
5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc

SHA256
15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c

SHA512
589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

Download Submit
/data/user/0/mob.play.rflx/files/x_dark.png

Filesize
676B

MD5
1b759349f0bf3e55c51e2a2c2802b3cf

SHA1
5a608a093fa5f513d1ba52e8a9e01f693c47da98

SHA256
59d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443

SHA512
3b39d22d0f8368dac2e36884b0316c5aba24180f51cb3a993fdefcdcfd5a36823d6c02c75863cd5a3bc0808223dcadf9934d548c433332bb9528f0eb8cecc0a6

Download Submit
/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

Filesize
2.1MB

MD5
60613793d0bce882b80f2429f3b50edb

SHA1
48b22e5a190e572e9014a10c4a4543e57f2cb332

SHA256
92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54

SHA512
81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

Download Submit
/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)

Filesize
719B

MD5
d165470950d875a5ef05e52b16fa2b71

SHA1
8eea6374a2f17e04a9265785fa1c805c4c3468dd

SHA256
ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c

SHA512
41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db

Download Submit