Analysis

  • max time kernel
    195s
  • max time network
    335s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    21-07-2024 11:41

General

  • Target

    Eroflix_AF_9.9_Hifi2007_SpydogCustomMobile_UserUpload.Net.apk

  • Size

    4.9MB

  • MD5

    1bd1d28f5db0da9772b6d132f896c74e

  • SHA1

    3356eb73ee99cd4133e19254ff337c1acc668f9a

  • SHA256

    9ca1f601e4a014349e56f6cd07f44d0ecf2d0d2bbdf75841257714161b61c581

  • SHA512

    ccf8daf3e427f512963222f51f49d66d1d0952a5eddaa6aa2d976bb3217c4f2ca4478e3915c09cb45531f23badee18e16da74c2c1f179ba163cd9a0416d60cb9

  • SSDEEP

    98304:UM8tDYRpYWx+qjcdciLBWThdotdyd6v1FNoLp84hOPFOB:b8tERpQqNxT3o3lv1iOPFs

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • mob.play.rflx
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Checks known Qemu pipes.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4328

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/mob.play.rflx/cache/image_cache/0343ff96508f827379384cb2660ab6b0245bd5b8ecbeec52c7b2bb197a9a2cab.0.tmp

    Filesize

    700B

    MD5

    a3fe2746e9cf829910f4c8786ad6e687

    SHA1

    dc774326897412a9da3bb89a0bac04dc1cb403c0

    SHA256

    827b428a23d0f0bb73c9824f77ba85fda36676d1bee6c4ec221aa8afa026cabb

    SHA512

    34c519072195ca8194e0da236cd076a1c3b31e04125aa769983ee0d8b2c805155c1cbef5a0e7becfa2be491413c8ac0b0b9e3295b6cc36620fcd8d8034cc7149

  • /data/user/0/mob.play.rflx/cache/image_cache/0343ff96508f827379384cb2660ab6b0245bd5b8ecbeec52c7b2bb197a9a2cab.1.tmp

    Filesize

    14KB

    MD5

    a2748c42f22dcab9272d412094b1388c

    SHA1

    56d2be801dfdca7b314578a3ba534aa31deab002

    SHA256

    8a06b9700e01b522cadf5d479ddae6fba02156f32e407294594cde58f351c4dc

    SHA512

    21640c9a16f59b0b998902c4a668aa7697829d0579dfcd317007e69a039ed9cebcf597f6136fae84edd80d5939972b1cf192bc1e64fa6ffee0b26b334f37abfd

  • /data/user/0/mob.play.rflx/cache/image_cache/39a51796b70c722422566ac942821981838c509e410a730699b28a232f5fd6b3.0.tmp

    Filesize

    701B

    MD5

    b719819c4f8871ceb0611baf02ac3c25

    SHA1

    f9ff885ce8071db26ad1bf3b17bfe472b96c2420

    SHA256

    4922f7d44d7cf9e0014fb3495dea55dd805fae0e1f7de583d1f1bbc4fb7ec96a

    SHA512

    b79728ef876a5c98ffea964e8a290080d87c844337253d0f75f165af219b11011fe724bbc7e8d52d16647c1be9f548526a079c46f2811ce86829899c70516719

  • /data/user/0/mob.play.rflx/cache/image_cache/39a51796b70c722422566ac942821981838c509e410a730699b28a232f5fd6b3.1.tmp

    Filesize

    22KB

    MD5

    f2dcb9a666311de3980344aede18ed16

    SHA1

    205ba5d3078418536c6a1629f83f3a652765637a

    SHA256

    77c822eabc786e1a05602d3498f23d1f098aa2eb72912bb06607844c4f57c8b9

    SHA512

    6306aea10dfe92491fb77701ec0a9bbca3f002ce26408980a0df647f8424b47c1cd22c1f4696b813429ae96686e9fe47fe98e0f20f5be592a2c8bf1397ddb59d

  • /data/user/0/mob.play.rflx/cache/image_cache/8206b6f2500ccaa6cb6f648c602593e0118d017db752496d534aa8b1bb1a888c.0.tmp

    Filesize

    515B

    MD5

    53a7319c69c9e8f016991950adcc4d7f

    SHA1

    b5c7c6b7f1cc98c0e711aa4e41bc4ec700ac9802

    SHA256

    ce6b2d334f693f1550cf2ba39b009db9096609d1099961e60791829dc3570574

    SHA512

    428507d7e135c2b4a982a25a8509e8490f75d0e7ebb074d9df862aa02f1c5d08e31b3927bc862ed13899a3241912a192ce961aa4492784aa12c090819d66181e

  • /data/user/0/mob.play.rflx/cache/image_cache/8206b6f2500ccaa6cb6f648c602593e0118d017db752496d534aa8b1bb1a888c.1.tmp

    Filesize

    158KB

    MD5

    f68e85d9c1a2dae82b6ea25b3ca8de4c

    SHA1

    9236db03d8761bb2b43c19673eb53cdbcf811341

    SHA256

    3576f55972ce9da667c6456125490e552a6d8f81dde0b1cdefb390efc650c825

    SHA512

    4455e09940835c6f27bd8b58ba5edc3473fe05bb7517972dfacf0c2baf299f400af8c5e3410e4cf38d41b3e3853c7dc775f15675f166d93e5eb882ad82d97be2

  • /data/user/0/mob.play.rflx/cache/image_cache/bcadf1605aa1e1b62e9957e01deb60512575c852950edafb1ed71970fdeabc02.0.tmp

    Filesize

    700B

    MD5

    902e65822618b2e516ab7e13b7a3428e

    SHA1

    45d0f7c5944a1aefbd7ed8649455850276ae7c87

    SHA256

    9afd83aec788e9c06460d4843e28f716e08cef772ed9c5aee6373e104b3a497c

    SHA512

    e2bfdb33bf9019ba28eb50432b9a1a28b7c6a221d9c9858f46fbc7849c3376d4d1155a481d8de4cdf5a2f67f8c674f01a169a5773c98dffd6c83a0f2e17b21f3

  • /data/user/0/mob.play.rflx/cache/image_cache/bcadf1605aa1e1b62e9957e01deb60512575c852950edafb1ed71970fdeabc02.1.tmp

    Filesize

    12KB

    MD5

    72ec4347f3284649543e20e08cae650a

    SHA1

    a80d242b502b8a93099a6981d837dbbec4b8585e

    SHA256

    2b0cf0e164ab63f5a890c6dca572933fbe788025aba380819cb4157304e8728f

    SHA512

    730b12998a0e3a4bc344c311c792a12491fb3e90a1b094a3eb30d5baf5e8934880b01872e412468ce600bbf7879ac4eb9be31175e678dd7d1f26cb2aaaea1452

  • /data/user/0/mob.play.rflx/cache/image_cache/journal

    Filesize

    850B

    MD5

    e4a4ce6183a1c4bfb0bebc5f8ba3d058

    SHA1

    3510fbfd0d15e3d534cc3084cdb08e526bb88e59

    SHA256

    10ba738ea97ba8efd887cd7800ff8855de0f439dd4a6845e8187a36c53300247

    SHA512

    3293f60ba77db6b0d09061c99b5c60babdb214bd70de2787355c62804cad7be7134711825d0dfef179dc3bd9380bdf74b81f2157a1b40032f80261dc2d384420

  • /data/user/0/mob.play.rflx/cache/image_cache/journal.tmp

    Filesize

    31B

    MD5

    d6ac8c8db0504502d7f0e057a78c5ce3

    SHA1

    8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4

    SHA256

    8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a

    SHA512

    100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851

    Filesize

    16KB

    MD5

    aa0a939e89ce7be802b839f6f902a2fd

    SHA1

    bcd87130c2b77881b4e5721aa225b70b81649c9a

    SHA256

    2cf7c25d43885225353c7b7b4feafa2a4172f6552773a32d3f15eb6f5c1a1505

    SHA512

    cebd7112a959fc6337da878104d00bdb10eb8ab2897d06aa8f98318cd6dc931c63a7f3ba09552c74ff2b7ad605602cea9759efdd2ff48dc7a76aa13a8a8d8488

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    512B

    MD5

    40688945a00bc11a71fc689522e8c771

    SHA1

    777ddab5c76233622686b6a29dced4d3a611d725

    SHA256

    3f09c152a97c6016677dafd4f572396f1320b0525a215d38e611f5cad07431ee

    SHA512

    4d711a274043d19127baab21fcf7b3f060b97a9110454a38e2a9c82ef2756ad4da9b6e4badf263f87ce0dca1d18e2cafd17f6c4b4de8e2282a1d188fe244330d

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    ae3cc5ef13fcb9acbe4df7812c100408

    SHA1

    2dc1fd4c22aaa5035d9888cec27688017f670dca

    SHA256

    a62e58a8a6d72c9b6d38513560955372ec9b356d6c521ed8e9ff884e3ab7976b

    SHA512

    e7c16c5390431f5b243cb3e5cd5b1482d7e0394a3e30a45918a84d0929cec764f1f0f5684ebde967675fcaf445e96b225ea871629c1aa9c1ef6616565279a41a

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    c28d8862b2568b00bacb1c1e782bebf9

    SHA1

    8515bd9b51cafc312252452d16e43dc83f865219

    SHA256

    9cc2b7a0a2e86faa67fb40414953ff7302fef8386201dafa40d3e20cb65cc0c8

    SHA512

    b85a61b247164b15e2c4ac2948be3b7b27456abe9aeafa2e76faa6c86456c420ecbc194c7741208bd4b649bc432555ab7147eab82c796d79464c24d9cc45bf81

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    a61b921600dab0141ada6e95f4be855b

    SHA1

    965d32ad02cb7a01b0c7bc0c1212f451b34214d9

    SHA256

    dfa80f2fb7b40ababa90b58e01df39ebc25db852c1762e3103fb5331d2b022e9

    SHA512

    22ac4bbf23a43bf2eee42a2d6333664953fad77fcd37a49ec2d1e3315323fb2b899e2df04d5604ba1d63c14f9c0faa8db8c25610f24f1f5e0bd9ba12b3625e7e

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    6dfa38f071193d75ff2ba55e63ebb7fa

    SHA1

    817a439e24b356284adb18d9ba8955be775eeeb9

    SHA256

    dea845030231fa887a73d0d2d7f59759b4bee18e07dc80e83ac580d096956ff8

    SHA512

    cfcda1b47b7da6321d6ea29586e84d6721aa7ed409b44132d57e9a4423b1c23cff55199cd2d91e1822a75f3be0f720023984629bd4a4cda084c57d7c6ef4a11e

  • /data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

    Filesize

    8KB

    MD5

    4f34ea344bd027ae8d9680d19520c8bc

    SHA1

    e9feeca96de2ab8cf5e08533239004d68ff997df

    SHA256

    4f7c9e7521dcefa135e49a85c35c6fcd42145363038866d9f5572ff47835ce3d

    SHA512

    0b011c153b736c9cd7215e5f8fdf389fb4d90007f8fcb960041a079ce90c0ed43831a8786074e0a0921d477af3af2734fcf113b13fefe8f6c92b2f88497d276a

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    ac37e3dab956054afb9aa5b0225f0fed

    SHA1

    16fa7c45b3073613188ca25d8f5aa229b1404d96

    SHA256

    1a5e580431a853bcd2f951b8e88aca4aff09760cea8444999bfc1c199ff6c7a8

    SHA512

    c67296b50af8e04b251c888d7ca1716045ea65c8a5b0260ff95a38b99689142bab73988a2436b9b8591b5dd9b331e98952d2d317fb9523a50245859e89b8ff1e

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    90aaa6e835b928d4ece0ec326ee5cf52

    SHA1

    f9ca52acd18d0ef81d74503f145cd20bb8d26602

    SHA256

    b3bb0bbd54335d4047b5460fa5514dfb503430c5a794089cdd164052f6fc32df

    SHA512

    a20ec93e6853b647cb770aa13b80cc27a85f6e4c6814ed85e783a0b263d5e59e8e9860a4b6ee9d548c623f6cb45975f9cd69f2d61204a66ffcd3a87b9db5cd36

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    17c097b140e8afe3b3f6ddb31cc54a5f

    SHA1

    e951d0ee1c1377c0bb3da06291a07b6848d9f61e

    SHA256

    2673bcf6dc1400c2db29dfbabdb7fcc908b5ee1240d2aae68523f0210ddece71

    SHA512

    172e2c91afdd5565d3876d5890f96ae70d0d763ab2d8efd058cd2ecf277bd95aa7b6dbc078e235af8cb0bcf4c0959958788118311f784f5456f236c5610945cd

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    24KB

    MD5

    bc55a44f133a146d13c6a407c8f1284c

    SHA1

    9dd683f0c24891a76dbc69d82355983396d98fd5

    SHA256

    e191297424c18e078eabc773ebf70d33c815d5bd957a068c19feccb71440fa0f

    SHA512

    01a54ed93eb5c3a15f0157d3d90ddb288f82c6bedc4553df4d615b81dada6fd21063facde9fcb4652db56ca7031790667bd0cb2cbb9bdd06714df8208631db8e

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    c77e41f01d98c0310ed5e5be91c8f531

    SHA1

    e7232d59f026e1dee4b6c25c57510d58b21c3de6

    SHA256

    848b4e5d105da6edb91bf06d60bd6ddd7c6b12e0143664f44ec659847ad0e2f1

    SHA512

    92f6e4e42c5663a5a5c5f252d8e1b8f6f1a746e614924656ef1f54e7fdcdae82f0ae896e60e0b17df105a07ad0925fe73228ecadbfd264da6da4c4965a84bb0e

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    16KB

    MD5

    e4bb529dffe4e403a7723eda2e4c365c

    SHA1

    4a3e738ec736325d8fab9a8a8a2fe9011f7c4fe1

    SHA256

    ecaed631bdb9e9ed6e1cc72a153142ce5d6ef5cd12b2a72fb0d34ae773ad5359

    SHA512

    9a0abfcb16db1af10f3f8f04d4fbc4d5ce3c025f238415d981fdc47635b46cacae935bd954c190a2b063df4fd0eac06122ee35270e2dff942c4f2ae27ca54a33

  • /data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

    Filesize

    20KB

    MD5

    48cd527067c17943df9d4af757091de7

    SHA1

    31402866b025965de8d3fc1618242ddc5568a714

    SHA256

    6e88c59678b4f89a3bacd01622c3c145e4418bc766d6b80c669aea10e151db5e

    SHA512

    c99d97094f11d2919d849fe40ea70e5f5aa7573122331b02ac6588220272469e357b1f770708c181d480187aa02a0c2d0c2ef936961dd0d141262ad9dde86194

  • /data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF41F01E4000110E8465F243317DD/report

    Filesize

    784B

    MD5

    92b0b6b8c93ec7a4df21a6262bcc4fd8

    SHA1

    fdfd0db5e0d0009a3c39dae994acd95d2485870b

    SHA256

    2ae25b24d2a22c5a9507352ae7bd34c230b641e3b8f484fd46c5d3ecab97a205

    SHA512

    47816bdcd552b267f4508463860853cf917ce9fd2879b86c82206c0b938045f598906f7b9db340efb7a79a73d8e16ad9e83d1e63b097739c1637f40c8fc51d35

  • /data/user/0/mob.play.rflx/files/PersistedInstallation3009898604862416606tmp

    Filesize

    569B

    MD5

    a46bc1495f40662f8f56c2342874bab7

    SHA1

    47a6490ff2311e6e09058d233a77c603a601da91

    SHA256

    683f486a2c8d0970259ffe12ac14c614668f80d8566fd90d5488fab4255ec3c9

    SHA512

    33d022f071fc5ae9c6ff68fc54fefa18f7ab5f22a3d96ed470a4595ce0001ad86e394402e6b20a3234a439b776576758dd3d1fc6ca86fa6163c635687206097f

  • /data/user/0/mob.play.rflx/files/PersistedInstallation3289998637916348143tmp

    Filesize

    90B

    MD5

    e73e8311c74c28c9d6b3b00c17d1d67f

    SHA1

    a4d00ebe4ecb300b0a0b0d9667ba11269785582f

    SHA256

    06123765fdc6e033d4bb812f435dd3d997885083b890083366b7ff159718593a

    SHA512

    bdaa3585aa3218fbdab2db94cecbfd015d9ad03b42c9748fa0ee65d0b011458de15acd6779736bed98b357a84cb323d20de04f80eeb54f8684e0c9fd38a08925

  • /data/user/0/mob.play.rflx/files/StartappAdInfoMetadata

    Filesize

    1KB

    MD5

    21159b6d4b3e976c8ec9c5dd6d0d6358

    SHA1

    8e1ed475edbb1561e029b1bd6ad97789791b273a

    SHA256

    20ca0d0d670b5592ef480d115559f9c5c4fffecae2afdea6c2a1bd204e49f0dd

    SHA512

    ea63e6aaec834e4b8f18066ce0f529facdea0a2e7ebaffe7087ed460ef3b5cabe4e5a52c4b2bc73f2798bfb345d3c138fd6d7dc6f2c577814c01eabfa08e679c

  • /data/user/0/mob.play.rflx/files/StartappAdsMetadata

    Filesize

    2KB

    MD5

    c5ec03049f2a725dbe8dff5598ea7afe

    SHA1

    3272e70169bcb264b8072dec2dda5c2d2f7432a1

    SHA256

    8d11f72942817bf46c3b47ba9e7892b70b5ccee1e01116804ac1d5b683c48840

    SHA512

    8d0134a29ef6c20c39e755d4d36fee2c119ae32d6f05d1d62c8ccf116756f216e8a9825a5cfdd576576d79c9bac33055b47216efea7dd4f966a14111680588c6

  • /data/user/0/mob.play.rflx/files/StartappBannerMetadata

    Filesize

    797B

    MD5

    1464bff0fd2bc323b44f3019e32e43e5

    SHA1

    e723343e3d4bd22bab0510ab4d1233e346b4a838

    SHA256

    5225c5f27e665aa4efe233d9efa63a60e7a62171ed33c1667cbb5bf6b92e44a3

    SHA512

    dcfde2c757c5b83ed0060792c6900f1e2614410a2441563d2bdbadfc24326f73f2fa0fa7f2b7bd4555aa2a2b03c15e0ac3d28ad4836e0fda5484f00f8f2eac01

  • /data/user/0/mob.play.rflx/files/StartappCacheMetadata

    Filesize

    978B

    MD5

    c41164d8f5044093acc85a4f93b1ca1b

    SHA1

    2001e355baa615da01da5bb8b60c88f64d0e57ff

    SHA256

    5e478ae54831bad55c4dcda78db4fa071411c98ddf9d057ff557a36b1cd9c3e4

    SHA512

    3812f2c85d4e24df3e68b0912a2dab1d1fff198ae0cd8c238e925239b19a084cbf2d58831bf5897ce764029f28bbe515b98acfb940ce985280beb9cf6251c57d

  • /data/user/0/mob.play.rflx/files/StartappMetadata

    Filesize

    10KB

    MD5

    b6e7174242f446970d116d9b9b7fa375

    SHA1

    c0f9c2ee94805ca8b9475c6ff61d492c9319fc17

    SHA256

    315b1b7231380dba38106a66f1cd8dd2d70d98217c02f68652cc4796b0cf3fd8

    SHA512

    209d84612ecd0ee56b9a4fcd074b183b6b22d8f4680a2932fad030b9785003c18311ead5891991309b843973d79446e5655932339635854c791a2ad84960d0de

  • /data/user/0/mob.play.rflx/files/StartappSplashMetadata

    Filesize

    1KB

    MD5

    84d44d07ee0cd574f5c73907b7a6055e

    SHA1

    19c7bb2bdf7f98e4ec69bbbd94981fd6ef8966c6

    SHA256

    e0a6705cbbe7af1c15e10c45b471bfff79dada9044f17fb7226c8fb6460f7ca2

    SHA512

    d8ecf9b58cb4aa25d14be75bdbd5c941dd5ecc98b85edd26110f93da78b552d3264b5458ae1e26a489f66e0d4771dc147d8afc73b6532a795e6457e27aa27947

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    57B

    MD5

    4c404e2fbefa5596fa59ce24111787e1

    SHA1

    33a1f14fd7dd528cf6796227372e065345b7db0a

    SHA256

    ea4ecb837b79ac39ba976df7160e9831df9f128a0accf9d956bc0f1ffee5fe0d

    SHA512

    11de2731b77cdb75bae955443d4a2260d495a8ef1b0af8437a8529cc0e91728fcbb3dc28cd6ee461d7a8288813d3e436d44b67b294e93030c18369e25ddc6277

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    541B

    MD5

    ddc58c0fc7d7cb9f71235ae3f4b111fc

    SHA1

    21d1745adf61beb1e5cf716f9a4ef53eab30327b

    SHA256

    0f98d66ad84782bde61f098ee2b875e3efa87afbdbdc0452d5abb9ba8e3c8565

    SHA512

    dbf0b7f894751056d5fea9c66ddeab4670e8dac492aeba143b03dcd5d15c3d1581be3ad08b90d22a1a4e946e60b563a7a3d749f9aea796acd38a4d1b99b40fe7

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    676B

    MD5

    8f0b579fee3285770f2e1f948df5c2f2

    SHA1

    317e723f7b46c3170866c4ffcb6ee62a5f8f2312

    SHA256

    de404db4f1b4da81df2f7527dc83b492979e099f5a63c241d31f24e4dc94fbff

    SHA512

    67f5b2b1a0d8dbae81c2031b4418861a504478a3acd9c2302e501bc27a2fd7ca61465235530d914dbea05a490494edfb064332977d31c922b999f09edaab2205

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

    Filesize

    937B

    MD5

    b152c52b4a80414ef7fec4e94e14d9b0

    SHA1

    68a87e1bdc8ba3a4015190aead39ee17b96e2b00

    SHA256

    f9b85afc8e3dc5a659adf5df28a8e0b45d3236bc75eeaa0ad71c0b5fd3be72e3

    SHA512

    784453521b845f7ab97da6dc2881f279836c26ef8dcc1996e4da7c939567723b30d9ee1c7fa309fdbb0b48d24268c81a2c534e22cbb8161e56377cf78dff6408

  • /data/user/0/mob.play.rflx/files/UnityAdsStorage-public-data.json

    Filesize

    2B

    MD5

    99914b932bd37a50b983c5e7c90ae93b

    SHA1

    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

    SHA256

    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

    SHA512

    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

  • /data/user/0/mob.play.rflx/files/back_.png

    Filesize

    1KB

    MD5

    f133b06147d3a62e6e7694a7cb9f9882

    SHA1

    16aeb42895bc494690dae7b839ee16e13ac9364a

    SHA256

    b92364b82cdc70e842fe6b11297cc3d3d0e93a348bde284e1b323c80e677a299

    SHA512

    d8f895ce05febfa4fc4d12184ee4c64b3369655efcd07adf5b5473a1040f163fb016173de08e186e94a1484d9f27d2e02b5b6df996037cd24fb309206abcd960

  • /data/user/0/mob.play.rflx/files/back_dark.png

    Filesize

    1KB

    MD5

    465c157abf1e96bac94e1106b07a4df8

    SHA1

    a526c26fdec2d0fcf7a9f5a3a40e848ff8ecb885

    SHA256

    e6072121a50f2be4073367f5cb2f7cde4ec63894891271016427e9ceee42fbd8

    SHA512

    e1de528bf4af3de0660f7b8f2673e4877e58b9d764d2798886967fa4ecad73916385ce73523b33025952cfc9f18f678ba3ab05ead40131aa7e37a3ba4b6be0e2

  • /data/user/0/mob.play.rflx/files/browser_icon_dark.png

    Filesize

    1KB

    MD5

    935454787d07b55a0bf196d23a3d07fa

    SHA1

    ef94b3ff30de349f177c55c1ac7fb4ba962ed281

    SHA256

    62e8f7f85bbeb88d346807f2446524c8ae1779afd61ee23e5ff6f865a5bb7a20

    SHA512

    3783566f7df41eff2862cbac6d132707e352c9ac76bfa8a14b5551f6a824af84e726e20307fa5f95b9f1ee1388300ce70ad3a55202aff75eaf1cc418370d18e5

  • /data/user/0/mob.play.rflx/files/close_button.png

    Filesize

    2KB

    MD5

    2d858e8af5d9426fe061df5c82ffa6ff

    SHA1

    bc1b2eab876aa221b6449d11e482de24b777d58f

    SHA256

    73d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835

    SHA512

    aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c

  • /data/user/0/mob.play.rflx/files/empty_star.png

    Filesize

    895B

    MD5

    76ce13c6312eb334fd351e3b5cff4bf4

    SHA1

    203bd863b812c071ab3ae25bf4ab2f9c4d42942b

    SHA256

    f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8

    SHA512

    d06ba34786090e3b027670a17910d2e35f48eb7bc639e6da1d08214534215797dadd1a56be44422b176801e5d1a1345cd2bf29e73acb6a49bc9a2f7670710783

  • /data/user/0/mob.play.rflx/files/filled_star.png

    Filesize

    756B

    MD5

    9db1f35e41f85aad692b8cabf46526a4

    SHA1

    18c91529430ea98ec6874a39811554dbf9caa6a9

    SHA256

    61550b17a9d3cd07bedefc4ee59c88b426a138151bac40802cfc512fd2642a36

    SHA512

    785b85c34cecb010e62b8643738d82c26b4d2c07092e3da8e8775ac1c10044a09ac7e1ac5f1cc01ab2c566bc2150aa406ddce87d91685a7d712cfe3236078d22

  • /data/user/0/mob.play.rflx/files/forward_.png

    Filesize

    1KB

    MD5

    9ee047a6801bec9459a9dd5ec7068078

    SHA1

    1aaaffc208e2d86e53fc031e8413169850e65746

    SHA256

    9f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12

    SHA512

    8245818df5ffe06c8f369c8d77479f9f2163d10dac36b0e37c834018b713dc8b063ec1de1862fe16a8c1a769b496652be880ddd48d6fcd24ad766a395bc3ff24

  • /data/user/0/mob.play.rflx/files/forward_dark.png

    Filesize

    1KB

    MD5

    12bfe20382337a84c0fc004a52b9ba9b

    SHA1

    ead15f7ef372c16f78060b8f8c5fc6e0ca6a96f9

    SHA256

    621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5

    SHA512

    7a346febc49154dd348be77f88c6e7ed5c7a531c2fed981f12c40e22a19e4e1a5c51fa766b3122898d97f05e1546a6f2a29b598b0ff441cc7de5e3c505aa33c4

  • /data/user/0/mob.play.rflx/files/half_star.png

    Filesize

    895B

    MD5

    a40e6a567b7aef329bda0ac200f7a23d

    SHA1

    2fa463649c7ba586b28670675a15e0d7a630c7e0

    SHA256

    ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556

    SHA512

    5e77ca21445a09aa903ca08c10c1bcaf769d8273368b7981aacf1bbab08cefb7a521687e78d280828f46b625c99fde02050f5c914dd4d07fd742723f7713ee4f

  • /data/user/0/mob.play.rflx/files/logo.png

    Filesize

    2KB

    MD5

    515c02d5e8e7f90a61ee1bdc68b6ebf1

    SHA1

    e55704189d65197fe05a9b4a23b4485cf3821ab8

    SHA256

    cadcf1170b3525a41737faf72b9c2fbf3282a5c4a8cd341518512177e5b3d36d

    SHA512

    7d27ed2cfb09bafea7a1b4145157c8920c631a332eeb1380ce1174676b9b119c3bfd928c344aa53c5da763cfb79403a4519354e5bd3df99356db4a3bfda340b6

  • /data/user/0/mob.play.rflx/files/profileInstalled

    Filesize

    24B

    MD5

    0e195e27f77fbd6b567ec28e6673abad

    SHA1

    012ff6a13094c979aa0377dfed6e3b46115c7521

    SHA256

    815c6c2305cf15522541dd10356b17c9fdfbdf1ced5b990e56b6c702e53ec25c

    SHA512

    30ef357342e232b3455b0bc439314769005f92ed9476297661d998f5d0ebf53287935958ce4eb92cc7a5348da6ac990f7bf8640dbdaed28c94af8744947b8a9f

  • /data/user/0/mob.play.rflx/files/shared_prefs_sdk_ad_prefs

    Filesize

    153B

    MD5

    65026ee778e1372d9f4aed742772e893

    SHA1

    5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc

    SHA256

    15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c

    SHA512

    589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

  • /data/user/0/mob.play.rflx/files/x_dark.png

    Filesize

    676B

    MD5

    1b759349f0bf3e55c51e2a2c2802b3cf

    SHA1

    5a608a093fa5f513d1ba52e8a9e01f693c47da98

    SHA256

    59d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443

    SHA512

    3b39d22d0f8368dac2e36884b0316c5aba24180f51cb3a993fdefcdcfd5a36823d6c02c75863cd5a3bc0808223dcadf9934d548c433332bb9528f0eb8cecc0a6

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

    Filesize

    2.1MB

    MD5

    60613793d0bce882b80f2429f3b50edb

    SHA1

    48b22e5a190e572e9014a10c4a4543e57f2cb332

    SHA256

    92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54

    SHA512

    81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

  • /storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)

    Filesize

    719B

    MD5

    d165470950d875a5ef05e52b16fa2b71

    SHA1

    8eea6374a2f17e04a9265785fa1c805c4c3468dd

    SHA256

    ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c

    SHA512

    41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db