Malware Analysis Report

2024-09-09 16:20

Sample ID 240721-ntynwazaqd
Target Eroflix_AF_9.9_Hifi2007_SpydogCustomMobile_UserUpload.Net.apk
SHA256 9ca1f601e4a014349e56f6cd07f44d0ecf2d0d2bbdf75841257714161b61c581
Tags
antidot collection credential_access discovery evasion execution impact persistence
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

9ca1f601e4a014349e56f6cd07f44d0ecf2d0d2bbdf75841257714161b61c581

Threat Level: Known bad

The file Eroflix_AF_9.9_Hifi2007_SpydogCustomMobile_UserUpload.Net.apk was found to be: Known bad.

Malicious Activity Summary

antidot collection credential_access discovery evasion execution impact persistence

Antidot payload

Antidot family

Checks if the Android device is rooted.

Queries information about running processes on the device

Obtains sensitive information copied to the device clipboard

Checks Android system properties for emulator presence.

Checks known Qemu pipes.

Queries the mobile country code (MCC)

Queries information about active data network

Reads information about phone network operator.

Checks the presence of a debugger

Schedules tasks to execute at a specified time

Checks memory information

Checks CPU information

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-07-21 11:42

Signatures

Antidot family

antidot

Antidot payload

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-07-21 11:41

Reported

2024-07-21 11:47

Platform

android-x64-arm64-20240624-en

Max time kernel

307s

Max time network

323s

Command Line

mob.play.rflx

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /sbin/su N/A N/A
N/A /system/sd/xbin/su N/A N/A
N/A /data/local/bin/su N/A N/A
N/A /data/local/xbin/su N/A N/A
N/A /data/local/su N/A N/A
N/A /system/bin/su N/A N/A
N/A /system/bin/failsafe/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /system/xbin/su N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/socket/qemud N/A N/A
N/A /dev/qemu_pipe N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

mob.play.rflx

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.179.238:443 tcp
GB 142.250.179.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 = udp
US 1.1.1.1:53 firebase-settings.crashlytics.col udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.179.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 configv2.unityads.unity3d.com udp
US 34.110.229.214:443 configv2.unityads.unity3d.com tcp
US 1.1.1.1:53 infoevent.startappservice.com udp
SG 213.35.101.181:443 infoevent.startappservice.com tcp
US 1.1.1.1:53 adsmetadata.startappservice.com udp
SG 213.35.101.181:443 adsmetadata.startappservice.com tcp
US 1.1.1.1:53 m.media-amazon.com udp
GB 18.244.122.174:443 m.media-amazon.com tcp
GB 18.244.122.174:443 m.media-amazon.com tcp
GB 18.244.122.174:443 m.media-amazon.com tcp
GB 18.244.122.174:443 m.media-amazon.com tcp
GB 18.244.122.174:443 m.media-amazon.com tcp
US 1.1.1.1:53 webview.unityads.unity3d.com udp
GB 18.165.227.63:443 webview.unityads.unity3d.com tcp
US 1.1.1.1:53 info.startappservice.com udp
US 68.232.34.193:443 info.startappservice.com tcp
US 68.232.34.193:443 info.startappservice.com tcp
US 1.1.1.1:53 trackdownload.startappservice.com udp
US 158.101.105.86:443 trackdownload.startappservice.com tcp
SG 213.35.101.181:443 adsmetadata.startappservice.com tcp
US 1.1.1.1:53 sdk-exchange.startappservice.com udp
DE 152.70.183.52:443 sdk-exchange.startappservice.com tcp
US 1.1.1.1:53 thind.unityads.unity3d.com udp
US 34.107.172.168:443 thind.unityads.unity3d.com tcp
US 34.107.172.168:443 thind.unityads.unity3d.com tcp
US 1.1.1.1:53 gateway.unityads.unity3d.com udp
US 34.149.76.49:443 gateway.unityads.unity3d.com tcp
US 34.149.76.49:443 gateway.unityads.unity3d.com tcp
US 34.149.76.49:443 gateway.unityads.unity3d.com tcp
US 34.149.76.49:443 gateway.unityads.unity3d.com tcp
US 1.1.1.1:53 auction-load.unityads.unity3d.com udp
US 34.49.168.197:443 auction-load.unityads.unity3d.com tcp
US 1.1.1.1:53 httpkafka.unityads.unity3d.com udp
US 35.244.205.3:443 httpkafka.unityads.unity3d.com tcp
GB 142.250.187.196:443 tcp
GB 142.250.187.196:443 tcp
US 1.1.1.1:53 firebaselogging-pa.googleapis.com udp
GB 216.58.204.74:443 firebaselogging-pa.googleapis.com tcp
DE 152.70.183.52:443 sdk-exchange.startappservice.com tcp
DE 152.70.183.52:443 sdk-exchange.startappservice.com tcp
GB 142.250.180.2:443 tcp
GB 172.217.16.227:443 tcp

Files

/data/user/0/mob.play.rflx/files/PersistedInstallation6672102116312652977tmp

MD5 ac05aff1fdbebd0eacb3e239d508b2f1
SHA1 06cbbe1eff56bb7e005371c917ab9d93bd5b3b09
SHA256 79c758a65ad428ffc861e9f89dd9529b6c483fbc6af6499271cfa8bfa4189b1f
SHA512 a9e1d18c402d71f2be5982b0c1ea7517e702b473355cc7b2d11f560e1145bf974eae1d27faf953a710d0bdb8e583419931e73b280c01949f4d7b831b2d647e00

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 f75e25b6af0ab663764946c0439bb08a
SHA1 6525ed1ab775a1b31472af7606c05f0af9741149
SHA256 0057b2e6f99c7beb1804b14b110b8f1606475afb12e2aeab62266c95c9e78c77
SHA512 b998f7404cc074e42aa50ab0f9b0970e141c31e52d910a0cf7a94ae0824398927adf58f2e2c20065ec03d4f0c9d5a5647f2824762b2edb12e054e7863286804f

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events

MD5 82042bb2138c287085584c0d9db98381
SHA1 4ef2c5678b0e53f990ca9fa1a4beebc3f539ba8f
SHA256 34d3c5fe932e35c886ec9179b59fef731122f4b7135e14b5cbe3ad1603087fbb
SHA512 b0c39f45bf708cb1269ed32c90878b8042297674367e1cd5d3c06474ddeebfea970c896ca66a36248fbd5fefe4d8a15c4c7d1a4f5985b567a15b734974016b08

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 e62f6700fcb360376ee7116b7b57702d
SHA1 dd1cdfa7073df1709f4ff6a43226ea735ca2d0e4
SHA256 438fc0212e61ac7c60a5b55677fe04361172c514de30d45486139498ea73e1b4
SHA512 a1d4fc6e35cd803d85a7164d529cdfdfaff2b38b3e34c2faf1da8bb66b748be949718e2a87f327555d0f95b04c789da8e06e767347314967f4504c8fd90934c4

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 9b07c0d9fde6cce0244aecdf6f4433a8
SHA1 309ce320320cc8ebb7b8f90eb66c1b481cf3471a
SHA256 fac81a10afd4bd516a6e975f3a938f15d7bdf5eb6b7471d86272a79bece846b5
SHA512 0ad69dc38ef1073f008096356dfdc61307cd2e8921246570c92bb17626fb75c6e6e227a69fdfe3256db01b9166021fc421f6f99040d1f95d62c0b3973c3316c1

/data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF41F0182000111797AF1D4C4421D/report

MD5 13dfa73c08b7e8d6ffd7ab88ea9477fd
SHA1 7e3d597fa366d6fd29e1a4667b5f977ba90786c6
SHA256 c9320b7822437f1a03dae05aa66a9354696f4b478e4b43667345c11f3830bf09
SHA512 e5c03695f4fe910f72542ba9bbf508967aeb2bb1ad1e7d62130f8973261bf14ee85a46f78eaf2db6dd0f0dd2c84e01171774a79f3c9e75966d9fa65fc8923453

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 07d0adee53fca5f7b8253bff618374dd
SHA1 167e931fb5bb64f0d3dcc91f6223574ee07d8dd5
SHA256 21ce1d8cff9343e5e4695a2dbc89eadaeae8e03138496f6ba7ce5681b8dcfbd6
SHA512 c35a6ed85d2fae313e8777cc266f49a6f84f904f643fd2aa55ca1d6c104a48fc40bcef4217706e3ca380aa37889696774c54770085939fc2caa3ca9d9575dbde

/data/user/0/mob.play.rflx/files/UnityAdsStorage-public-data.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/user/0/mob.play.rflx/files/shared_prefs_sdk_ad_prefs

MD5 65026ee778e1372d9f4aed742772e893
SHA1 5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc
SHA256 15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c
SHA512 589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 c958781bd2724665bfa0b95630edb4d2
SHA1 a96f74a0c19f20a5b37e55ac9d1f8e8a20943561
SHA256 72bf605333109e16037375b2162bd9e3c61dea28e1e8a55c6af524bab6a85548
SHA512 8003cb0800087aeddaf95efd1c6d8690c919bd611baf86c917fc0c5fa3a5b37febac7c62b3fe9be3cf74f1c387fd1d3802e3e1d5d6f2c4276b25f55049c138d8

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851

MD5 83663c5105ad6197c5e71401f018e669
SHA1 f58695aadfb50052bc09e25f2f550374cabf224b
SHA256 44c13eaa042e183e2594580608aa9b299832ae486c49c3d71e5ec9e7bacf092c
SHA512 8252810985ed2473a0a65e6131b62aec1a8f74c0cab1f5dec293ebaeabaaffd762807300353163d13758092f8837149ffa31fd3fd5b83b93fbac6de9c018eb5e

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 bcaaf6e1bf790f82532c69ff46838f9a
SHA1 c66e00b15235c616efd8dbdd085beb639b721c91
SHA256 81fbd3789965feb3ea09ff441a8c71dd7943e15b9f38d737ef098b9dc745ce41
SHA512 f5a07b4c6ca59ffbf383f2eb0a0a3035c8c8966f7ccb29ce464fd4514630286b8081862e631bf566f2f579cf84d5808f081fa163bde613e27de9c82b598bb09f

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 216b59a8012e4f213b80245a741f87bf
SHA1 a06c7c11ecab46b91dd6f2c270bd9b9cf43887ea
SHA256 548a3edda75db932d6d5a156f093949fea5fbea2af98f5811b6d7462e7d8e7bf
SHA512 bc60b20580f186fe8f2df248362567edc8112b9a9bd7dcdb21bd1e473d1dda1738bb4a49b3eb4acbde38da9a3bc2897d351862cfd72af62d2ea0eebf03d89d47

/data/user/0/mob.play.rflx/files/PersistedInstallation2326143534556251182tmp

MD5 3d1cd4b20de71f55048660ac0782bfea
SHA1 f6083f04d139a96e0429d3cd17a8539473afd59d
SHA256 878a7c060faedae76435a8008282c032686d6945eabd65a563492240ecd0f0ae
SHA512 228783c3cf0200ad316f937a8ae76df42ec6273072a99f4a2041bc9a8f4cf9c769468a8e4c19e5c0d761ffc3849bfa4488ca79cd8539101cf26f027db83481c5

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 0b92eaac425276de1d765adc87ff5f19
SHA1 1448dbd4b7ca7982cc8f74dcb0de036ea93c68da
SHA256 cecb1b569e96ddc85e2d239fa298c5797ebc3181a14acc57e8e0f54471232376
SHA512 e77485c2ad2c1474d37d13f4857bc1ccb9dfd9851cf18ef2587f1f076e720bff52b1dd20e1bd6c87edb06b3fee95a572d4309d5fa15fe8456fad28b812006158

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 0fbf2ba225c4583645e73033a30d4e38
SHA1 9b449ff83aea0379365d8f4d7f0a4f08331a6610
SHA256 2503919e0a6f1eda04a12e61bc8ff07a83dfa7a9ee02bbe65c4a82f0fe7ac0e8
SHA512 f6f1184e144fe63ca7fd2236e17d210fbc51b7b8e72089ea5dce88abab82531966a2cb333cdb1cc47643f059aa443df9f592e8c15b1cf56aad49f6168dd38f2c

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 d31ba15b224549d8de43b3d32bc9b27f
SHA1 d762bfd9cae86c1b015261129216c4e9ab913a19
SHA256 01ad68cc26b509c91d737e577ef770190d59bd864db40f5b2987dcc44ed7b11a
SHA512 bcb7a8bc7577d78fe7e758174fb094221465f3d1ac28c20ed6464171673ca0f1267b619aaecbf0c861334bc6efaf1f7f5f0cca907d1754633c729b6f72383dd7

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 5ac727a0629615991d5011efada8ac0d
SHA1 2919edec51e3f8da23ed7cd6aaaad25b1c3ad6ee
SHA256 be1893dff828d9e94e681590ce1961ef89c8885edd7f7433ce50d78a1359eec6
SHA512 6562c03cfee0ecb14beca30ae75cf4b4b72fdae64c6309ea2c939dc5d5d085ecf737fe59f37eb0fd229c4137b88896d61b22101a2f852518784315a60f78426d

/data/user/0/mob.play.rflx/cache/image_cache/journal.tmp

MD5 d6ac8c8db0504502d7f0e057a78c5ce3
SHA1 8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4
SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
SHA512 100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

/data/user/0/mob.play.rflx/files/StartappAdsMetadata

MD5 c5ec03049f2a725dbe8dff5598ea7afe
SHA1 3272e70169bcb264b8072dec2dda5c2d2f7432a1
SHA256 8d11f72942817bf46c3b47ba9e7892b70b5ccee1e01116804ac1d5b683c48840
SHA512 8d0134a29ef6c20c39e755d4d36fee2c119ae32d6f05d1d62c8ccf116756f216e8a9825a5cfdd576576d79c9bac33055b47216efea7dd4f966a14111680588c6

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)

MD5 d165470950d875a5ef05e52b16fa2b71
SHA1 8eea6374a2f17e04a9265785fa1c805c4c3468dd
SHA256 ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c
SHA512 41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db

/data/user/0/mob.play.rflx/files/StartappBannerMetadata

MD5 1464bff0fd2bc323b44f3019e32e43e5
SHA1 e723343e3d4bd22bab0510ab4d1233e346b4a838
SHA256 5225c5f27e665aa4efe233d9efa63a60e7a62171ed33c1667cbb5bf6b92e44a3
SHA512 dcfde2c757c5b83ed0060792c6900f1e2614410a2441563d2bdbadfc24326f73f2fa0fa7f2b7bd4555aa2a2b03c15e0ac3d28ad4836e0fda5484f00f8f2eac01

/data/user/0/mob.play.rflx/cache/image_cache/journal

MD5 12cd04860de7b967365389ccdcb4a188
SHA1 5e253c144f713fe479cf47f838bbc98c89eb75ea
SHA256 95c2ca8e5d6754de9698ec42d512dadef274a049d767e35287141bc3b0101511
SHA512 4f74766c28384e961b99320bf27251c8fa32416cab5f76846f57b356ba6b79b988ecbd5baabb57338ee9fa82d6c1b6fc9e8d9f446630f038203ff7b62d4c39d3

/data/user/0/mob.play.rflx/cache/image_cache/890fcf7d59faccd6ec365159309a7f9be6d2ce23d2e4114fb7fca00785969701.0.tmp

MD5 1273bcf4d2a382ffeab9f2977161616b
SHA1 831910cb5e87c939d354fd51eb06a88fc7fde5b1
SHA256 d6caaef5d08123ed07d62bfefb7ee9563963cfe10f46bdad73390748f41b2a6b
SHA512 eb178f32e1793a6af355b40cfd144f3f5405d49e2fbbae15b5a8f02e0879a3666db51b5c287a1b5f6069fcd19c1af3aafede62b68520bf50febd4a53ce80a0e5

/data/user/0/mob.play.rflx/files/StartappSplashMetadata

MD5 84d44d07ee0cd574f5c73907b7a6055e
SHA1 19c7bb2bdf7f98e4ec69bbbd94981fd6ef8966c6
SHA256 e0a6705cbbe7af1c15e10c45b471bfff79dada9044f17fb7226c8fb6460f7ca2
SHA512 d8ecf9b58cb4aa25d14be75bdbd5c941dd5ecc98b85edd26110f93da78b552d3264b5458ae1e26a489f66e0d4771dc147d8afc73b6532a795e6457e27aa27947

/data/user/0/mob.play.rflx/cache/image_cache/890fcf7d59faccd6ec365159309a7f9be6d2ce23d2e4114fb7fca00785969701.1.tmp

MD5 fb99fda7a29c4877a630f86246f58670
SHA1 5a0c1fe5fbb72e21aa6fe0787a4120de2228e856
SHA256 f24f1c0e0af05b904ce5637a915091153be736c9733085b90e416d6481b9b506
SHA512 3753d4ac50d64b2a746cb860b59c1aaed53e07671f3d63cf119bd024e8851d342085671236839981a481d43db7dfd25e1dfb7f36b26dd93d5c611e2da06e3a20

/data/user/0/mob.play.rflx/cache/image_cache/15bfcd23f629d471104dfd0496a6484dc41ded7ed9dd454bca760c799201e723.0.tmp

MD5 c83f9e73b016bbb8abb436a92b0e1510
SHA1 5249464b38cae34a0fccc794f91511cea8a7ce96
SHA256 5accb6d821791cdd427cf050adc57dfeee992af99fb7723472bcd49e7f1ab7ec
SHA512 1191f4ab685da64c12323a98fe2e0c2cdc9257b11d4b5a2f247e110b5d66ec125e0f48552a3fca18b42b812145220361cac5b248bbff966c8fdcd576c26255a3

/data/user/0/mob.play.rflx/cache/image_cache/15bfcd23f629d471104dfd0496a6484dc41ded7ed9dd454bca760c799201e723.1.tmp

MD5 b2d0062d5f894d5158c509d1b697824d
SHA1 3862a6688a4ddd8bf4871a8ffa60e75b8fa2c998
SHA256 2061cb6790b06ead712b93651c3b1bdf7ce99ca2e7bbca8ba673c47f2e066820
SHA512 a81967b80c6352662e17a2c94a5c3cde9e037d4528ee301696c21965745810bdac438eec2ee224bca7feda39a7b8929b9e3eb7ec07030b84a14e5bad2a878284

/data/user/0/mob.play.rflx/files/StartappCacheMetadata

MD5 c41164d8f5044093acc85a4f93b1ca1b
SHA1 2001e355baa615da01da5bb8b60c88f64d0e57ff
SHA256 5e478ae54831bad55c4dcda78db4fa071411c98ddf9d057ff557a36b1cd9c3e4
SHA512 3812f2c85d4e24df3e68b0912a2dab1d1fff198ae0cd8c238e925239b19a084cbf2d58831bf5897ce764029f28bbe515b98acfb940ce985280beb9cf6251c57d

/data/user/0/mob.play.rflx/cache/image_cache/42e95ac2dd755474aac8bb656608a6f0ff0237a20c163002c70ef1647aec3fd5.0.tmp

MD5 02397ef8d455797f80e8b589f6faf899
SHA1 477f6f8879104591f1d5e6d274eb17626f3df678
SHA256 946a05ce6b7437eb5790563d71fc4ac98fce6dc8118a50fa0099386b9a573d93
SHA512 c6e34ddfad3d95ec476c89ca28a71671b52bb8333436776a9c2562fd8ef424485f5514345a0d1f0b2a53b7b2ab256dc7f93de4ac881e057f7035211a2c432325

/data/user/0/mob.play.rflx/cache/image_cache/b9faae9f44453e4fd7ec27b35122089fcce2367cd760271fd275983094d28119.0.tmp

MD5 d5a6a1f12555dcc8007571ca37c4599d
SHA1 134585c2a044949715ea5fc5aeee438e191081af
SHA256 838a7a43b3378bfd3096bdc4db199a0891db4e9b9ca1d822557df391980c2377
SHA512 f0118a3c063fe3ed4ef5ce7a26754fad6507c0c186201492f3386c1d85dc713ca1fd004a5464b8d3846ed36feffc9b4aa61dc4fd6c9a4cd345bcbbc82e6bec7e

/data/user/0/mob.play.rflx/cache/image_cache/a4f77a25143bb86c5602d3677514c7d920f8d4bd02d3e3486c4eff7392ef9f35.0.tmp

MD5 0f45fe7b107579fe9da418e9cb72181a
SHA1 81b7d0dc762d894d7862144283e2ce0192de8fc7
SHA256 6e93d010e14bdc218f6657c464cd411bad0af326346379cf9c7384c9a25333c1
SHA512 c4ee167102315ec3d8cb8b47e0d2263a3dcdc0838360a40816948388ed96217945e1495e5ebea55d450096f77841e23cd6c3a4ad1df1bc1cb8d216e20b6a4132

/data/user/0/mob.play.rflx/cache/image_cache/7b89eb2f54ed6b14a944457f1c8eaa0daf78136ef77f03242dbcd2dfd5c3c159.0.tmp

MD5 2acf95a0a6fe698faa14ebc999498025
SHA1 5d40b60a9b9b740124da8c4f3473c522c526791d
SHA256 b8fd14e90939596ed2c6d3ef48010dbb7f88cf58218a19b44d40448f638b522c
SHA512 61950270b92c74f4d3772d22aee6448b043c9e2d226c4cf3b2861da11ba4dfd38f1d0410f98eefec97e32f9d2d8137dc18cfa8e77ad69834c8140c39d179223c

/data/user/0/mob.play.rflx/cache/image_cache/42e95ac2dd755474aac8bb656608a6f0ff0237a20c163002c70ef1647aec3fd5.1.tmp

MD5 096598c2ffc9a7c0f45e7b527a8c6687
SHA1 16ec687583bb567108a68ec3986be270e56e3e03
SHA256 688f3da950ba10cee9377e424ed7e053f496fc92ceb4efbb75052296418872e9
SHA512 fa004df3c963a49c2d528a092f4728f1b55480cec8a5efc2f708946da16920a0ebae48093bf213e98ff9b6ee70ef317cff268944be958574e48814090af592c7

/data/user/0/mob.play.rflx/cache/image_cache/b9faae9f44453e4fd7ec27b35122089fcce2367cd760271fd275983094d28119.1.tmp

MD5 6b91ad27e143d0e496ebe3ad5af736bf
SHA1 948081006d8fa198737f736737c29188d778049a
SHA256 d9ad550f6152034dcb3c6a4813ccd1fb81a1b415a0b8d80be0f268cf48a8667f
SHA512 5790ec5593b21569b1d74a2caf712f67dbf8434a856b50b69b1863cd3cef33afd643f0490410f9b477289699fd6734168cb70ccb4c4a03c217f5f275fad0f3f7

/data/user/0/mob.play.rflx/cache/image_cache/a4f77a25143bb86c5602d3677514c7d920f8d4bd02d3e3486c4eff7392ef9f35.1.tmp

MD5 b0d61eb92a62e47d136f3ff0e587d98b
SHA1 b44260a1bbd4f4df32ba83a71a6f32f2c6c826f5
SHA256 35d97f3c6ca6f81ac74a25c1dd54b1631e39476374b1e17e6d15f731b8c60e16
SHA512 97f42095570b4a775266f638c6e8177ed1ebea8af961914ca95749629019246512e9858e8ec2bc2bf318015fdbd349c4f3ac76541b97b117f6a7a9909a9c2a1e

/data/user/0/mob.play.rflx/cache/image_cache/7b89eb2f54ed6b14a944457f1c8eaa0daf78136ef77f03242dbcd2dfd5c3c159.1.tmp

MD5 0d63f8e422261dc53ed486d0a7e52488
SHA1 fab429e6f956f48358ffb3db49c0a7eaafa8f843
SHA256 0c42577eb24a925829cbe8bdfe27221823ccb53298c30d5d5b477bbfd42838c1
SHA512 2351ae4a33035cb2328683b026c730deba2f09acb6d5ab445a54345b2ff551a87fe9d9db37ec56b0635538afa9336795aa7b2719769660a312175a91c978870d

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

MD5 60613793d0bce882b80f2429f3b50edb
SHA1 48b22e5a190e572e9014a10c4a4543e57f2cb332
SHA256 92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54
SHA512 81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

/data/user/0/mob.play.rflx/files/StartappAdInfoMetadata

MD5 09215b820396153668dc0058004fc039
SHA1 483d50a932a1abbbc1d848c9a956cdc20bb6e452
SHA256 54ce5572686a2f40f3a2ce4b492a8907ee77de32db9b4fcc6154535c5580e2ce
SHA512 6b8aa4357e700dba1e944a6648277492b7e09122745efdc5fba22a94da90d9be4a4fcdbe5454b4a66b5bc0538011a9a142aea14572550aa1f42f39e612099347

/data/user/0/mob.play.rflx/files/StartappMetadata

MD5 d36d8ad67affc49903dc7445cd6c666b
SHA1 b8dedc31d26a780ea57974e8ff88e3e3dd64bbdf
SHA256 483b4e8be52c3daeae4a53fcba4ffb6d0adb742631f728a1e638691b0df97a1d
SHA512 35cad52c5430759079eb689b4e2fe556b14ab2a22b66ee8f545b9c2787614129bcebda546bf61d05899196b3d0f204bd6f34c7fcd2f86547e15128ccbba6a95b

/data/user/0/mob.play.rflx/files/close_button.png

MD5 2d858e8af5d9426fe061df5c82ffa6ff
SHA1 bc1b2eab876aa221b6449d11e482de24b777d58f
SHA256 73d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835
SHA512 aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c

/data/user/0/mob.play.rflx/files/back_dark.png

MD5 355eb0af21063fefca005d93d6afa9c9
SHA1 f854e3d2f0c0470a54e55f31017f9c499bd3671d
SHA256 b50339f939827a8e5a918ee4ed1d8213e27f6d546a98313f90449b27a1ebc00d
SHA512 ffff59e303636383dccc1282dea4c13b8c46d9aea1d646d745f7d26607cfabc25aea8001af873942749129291abef5dc5a858e7360cbfc145f870b80689b34e9

/data/user/0/mob.play.rflx/files/back_.png

MD5 ebc06fd3d86c27a426932a83325eeffb
SHA1 461c990e677114de3baba2a33f0a60c0a10bb9d2
SHA256 ada010f03b82133ccddb4ac69a7c81a1d507121ef1d276c7c191bb55401c2230
SHA512 3b3c682dc3876f7c813bff1a38e53e0c20f6c776eeb8362a8a750b81d0a3132a207b01740a493c61a03261748399e020aec5fcb7354c723e4f5703efe5418b2b

/data/user/0/mob.play.rflx/files/forward_.png

MD5 9ee047a6801bec9459a9dd5ec7068078
SHA1 1aaaffc208e2d86e53fc031e8413169850e65746
SHA256 9f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12
SHA512 8245818df5ffe06c8f369c8d77479f9f2163d10dac36b0e37c834018b713dc8b063ec1de1862fe16a8c1a769b496652be880ddd48d6fcd24ad766a395bc3ff24

/data/user/0/mob.play.rflx/files/browser_icon_dark.png

MD5 cac9a26c27728066be7a285defc0df6c
SHA1 9931d42eea7663aaec4eb901bcf279b246c19e34
SHA256 9347cbd8e6e2af4d09759e55b7595474648619da07992d6485b9756ab4d8170d
SHA512 11a3abfc4558e6c887f1f809a3837ffe6f4c1702407db945319acacaa5e677f6b117c07ca676cda6438639a1ebc447a2993e0ff31be8ef797bd219700f508ba5

/data/user/0/mob.play.rflx/files/x_dark.png

MD5 1b759349f0bf3e55c51e2a2c2802b3cf
SHA1 5a608a093fa5f513d1ba52e8a9e01f693c47da98
SHA256 59d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443
SHA512 3b39d22d0f8368dac2e36884b0316c5aba24180f51cb3a993fdefcdcfd5a36823d6c02c75863cd5a3bc0808223dcadf9934d548c433332bb9528f0eb8cecc0a6

/data/user/0/mob.play.rflx/files/forward_dark.png

MD5 12bfe20382337a84c0fc004a52b9ba9b
SHA1 ead15f7ef372c16f78060b8f8c5fc6e0ca6a96f9
SHA256 621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5
SHA512 7a346febc49154dd348be77f88c6e7ed5c7a531c2fed981f12c40e22a19e4e1a5c51fa766b3122898d97f05e1546a6f2a29b598b0ff441cc7de5e3c505aa33c4

/data/user/0/mob.play.rflx/files/empty_star.png

MD5 76ce13c6312eb334fd351e3b5cff4bf4
SHA1 203bd863b812c071ab3ae25bf4ab2f9c4d42942b
SHA256 f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8
SHA512 d06ba34786090e3b027670a17910d2e35f48eb7bc639e6da1d08214534215797dadd1a56be44422b176801e5d1a1345cd2bf29e73acb6a49bc9a2f7670710783

/data/user/0/mob.play.rflx/files/half_star.png

MD5 a40e6a567b7aef329bda0ac200f7a23d
SHA1 2fa463649c7ba586b28670675a15e0d7a630c7e0
SHA256 ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556
SHA512 5e77ca21445a09aa903ca08c10c1bcaf769d8273368b7981aacf1bbab08cefb7a521687e78d280828f46b625c99fde02050f5c914dd4d07fd742723f7713ee4f

/data/user/0/mob.play.rflx/files/filled_star.png

MD5 317f802aacfab6282b8f74f280e841c1
SHA1 3b746a76f6322e97fd6c09a43d03ac14631d93e1
SHA256 f37f9a17c20ca3068f4f9db08c262c62b7b86544532f612a78421bdee92f4196
SHA512 a714f902ede615507cef840dcc03a5eca183c21c82cc419a924587f38b6974f5aa45fcfcc2bac4d6cf82b81d1b6ad452540e0581751bfcad72e524c83757a301

/data/user/0/mob.play.rflx/files/logo.png

MD5 45c24a8686a0978086c99f7039accc17
SHA1 c63ae2601322045390c7a4f230602b74ae18d2d8
SHA256 bc9c4aa36a0dd7efe16a8b3bca9172d970fd13d70d3e718aad17a78269079912
SHA512 d5861c64b9dc9139904c3bfc7da26fa6f3d9676a5b4203ad617c661d54d3716508fb02f282f5c204bf9d6a0c7162bbb565a44f2ceb96d825177065818b797727

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 425606fba2db5414424043217c85dfa6
SHA1 df18f2d97679117caf0609f54e553fafca30c27e
SHA256 38b8aaaa5c5a94fa6fefbed41108a4b797cf9862d768c2317ddec44e3f8197e0
SHA512 47916b51952ff096f1aec831873abdee31c9c03f6e7f2682a323a407d6da5e0f4f8a22c1e3897a134ed2e7454d43c1853ec424d1414904423a64930dfead950e

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 297f51f7fecc241ced926c3da66abf1f
SHA1 1dd9a2669bc5869169fcc0d6aeaafb22657410a6
SHA256 87761e0a52019b1bc14913dbca5fe093dd106515160434007ad06bd1900abbaf
SHA512 5159e2ff2c2219febab5cda581ccab627fe457738c4c52efc46db2fc81ce00dfe1cfe64f1869442b8b8a51abcffcca7d06c044d0f5faabc4ff58bd6db834002a

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 4b5e6fd8f2bc54acdf786e6a31181093
SHA1 a34e941440a6273c5b37c353edfe928bb900d6fc
SHA256 17a6896e38a0b7cf6dbff0d3179b24eb4738170d29ed5378c47c3b0609e0ceff
SHA512 aaf94828a1ae9eca19998cb891cde2c78474b9de7dba97722f83abe0764cb8db10ebbb40cf2582296d6d8bcd172d42721b61e88b4f02fbd6c606955f491a222a

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 f233c9d0246ffa4b5fafa95af7094ba5
SHA1 f3b4e45f1929346fb1eebc3557923bd459cf81b2
SHA256 c3d147b414e8ce2fc020dead2263d2717c81e6ed2f2b32750a7c604090242aeb
SHA512 5da34b094b52b6fb6fb1487d92613658da446b732e63454a40102593d935ec0e0e5db8f4b87936abec0d18dc910ad6b5f71ce0e6d3c91963233759fc18f92866

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 b4cd0ca77dcd9bd668a003488983e7a4
SHA1 f951221935c6f8eb4c4b29e836402be2685dca9c
SHA256 50dbacffbf3cb4feb55e00b7518a41d0cea3627d51faad087bd8cb6f76ac2d94
SHA512 a348025e4727c70226c358a24cdc76ff5def63f0e57df68ebd55ac009177a3d363db185e14da3912e56e47bc4ea1d77a25d5c5e6634ed217c134145ec124559f

Analysis: behavioral2

Detonation Overview

Submitted

2024-07-21 11:41

Reported

2024-07-21 11:47

Platform

android-33-x64-arm64-20240624-en

Max time kernel

195s

Max time network

335s

Command Line

mob.play.rflx

Signatures

Checks if the Android device is rooted.

evasion
Description Indicator Process Target
N/A /system/sd/xbin/su N/A N/A
N/A /system/app/Superuser.apk N/A N/A
N/A /data/local/xbin/su N/A N/A
N/A /sbin/su N/A N/A
N/A /system/bin/failsafe/su N/A N/A
N/A /system/xbin/su N/A N/A
N/A /data/local/su N/A N/A
N/A /data/local/bin/su N/A N/A
N/A /system/bin/su N/A N/A

Checks Android system properties for emulator presence.

evasion
Description Indicator Process Target
Accessed system property key: ro.bootloader N/A N/A

Checks known Qemu pipes.

evasion
Description Indicator Process Target
N/A /dev/socket/qemud N/A N/A
N/A /dev/qemu_pipe N/A N/A

Obtains sensitive information copied to the device clipboard

collection credential_access impact
Description Indicator Process Target
Framework service call android.content.IClipboard.addPrimaryClipChangedListener N/A N/A

Queries information about running processes on the device

discovery
Description Indicator Process Target
Framework service call android.app.IActivityManager.getRunningAppProcesses N/A N/A

Queries information about active data network

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Queries the mobile country code (MCC)

discovery
Description Indicator Process Target
Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone N/A N/A

Reads information about phone network operator.

discovery

Checks the presence of a debugger

evasion

Schedules tasks to execute at a specified time

execution persistence
Description Indicator Process Target
Framework service call android.app.job.IJobScheduler.schedule N/A N/A

Checks CPU information

Description Indicator Process Target
File opened for read /proc/cpuinfo N/A N/A

Checks memory information

Description Indicator Process Target
File opened for read /proc/meminfo N/A N/A

Processes

mob.play.rflx

Network

Country Destination Domain Proto
GB 142.250.200.36:443 udp
GB 142.250.200.36:443 udp
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 = udp
US 1.1.1.1:53 firebase-settings.crashlytics.col udp
US 1.1.1.1:53 configv2.unityads.unity3d.com udp
US 34.110.229.214:443 configv2.unityads.unity3d.com tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.169.46:443 android.apis.google.com tcp
US 1.1.1.1:53 api.npoint.io udp
US 216.24.57.4:443 api.npoint.io tcp
US 1.1.1.1:53 adsmetadata.startappservice.com udp
SG 213.35.117.150:443 adsmetadata.startappservice.com tcp
US 1.1.1.1:53 i.imgur.com udp
US 1.1.1.1:53 info.startappservice.com udp
US 1.1.1.1:53 m.media-amazon.com udp
US 199.232.192.193:443 i.imgur.com tcp
US 151.101.65.16:443 m.media-amazon.com tcp
US 68.232.34.193:443 info.startappservice.com tcp
US 199.232.192.193:443 i.imgur.com tcp
US 68.232.34.193:443 info.startappservice.com tcp
US 199.232.192.193:443 i.imgur.com tcp
US 1.1.1.1:53 webview.unityads.unity3d.com udp
GB 18.165.227.78:443 webview.unityads.unity3d.com tcp
US 1.1.1.1:53 rcs-acs-tmo-us.jibe.google.com udp
US 216.239.36.155:443 rcs-acs-tmo-us.jibe.google.com tcp
US 1.1.1.1:53 trackdownload.startappservice.com udp
US 150.136.215.59:443 trackdownload.startappservice.com tcp
US 1.1.1.1:53 sdk-exchange.startappservice.com udp
DE 132.145.224.90:443 sdk-exchange.startappservice.com tcp
US 1.1.1.1:53 infoevent.startappservice.com udp
SG 138.2.110.152:443 infoevent.startappservice.com tcp
US 1.1.1.1:53 thind.unityads.unity3d.com udp
US 34.107.172.168:443 thind.unityads.unity3d.com tcp
US 34.107.172.168:443 thind.unityads.unity3d.com tcp
US 1.1.1.1:53 auction-load.unityads.unity3d.com udp
US 34.110.184.100:443 auction-load.unityads.unity3d.com tcp
US 1.1.1.1:53 httpkafka.unityads.unity3d.com udp
US 35.244.205.3:443 httpkafka.unityads.unity3d.com tcp
US 1.1.1.1:53 remoteprovisioning.googleapis.com udp
US 172.64.41.3:443 tcp
US 172.64.41.3:443 tcp
GB 216.58.212.227:443 tcp
US 172.64.41.3:443 udp
GB 216.58.212.227:443 udp
GB 142.250.200.36:443 udp
GB 216.58.204.68:443 udp
GB 216.58.204.68:443 tcp
GB 216.58.204.68:443 tcp
GB 142.250.200.36:443 tcp
US 1.1.1.1:53 firebaselogging-pa.googleapis.com udp
GB 216.58.212.234:443 firebaselogging-pa.googleapis.com tcp
DE 132.145.224.90:443 sdk-exchange.startappservice.com tcp
DE 132.145.224.90:443 sdk-exchange.startappservice.com tcp
GB 142.250.180.2:443 tcp
GB 142.250.180.2:443 tcp
GB 142.250.180.2:443 tcp
US 216.239.32.36:443 tcp
GB 216.58.213.6:443 tcp
GB 172.217.16.226:443 tcp
GB 142.250.179.225:443 tcp
GB 142.250.179.225:443 tcp
GB 142.250.179.225:443 tcp
GB 142.250.179.225:443 tcp
GB 142.250.179.225:443 tcp
GB 142.250.179.225:443 tcp

Files

/data/user/0/mob.play.rflx/files/PersistedInstallation3289998637916348143tmp

MD5 e73e8311c74c28c9d6b3b00c17d1d67f
SHA1 a4d00ebe4ecb300b0a0b0d9667ba11269785582f
SHA256 06123765fdc6e033d4bb812f435dd3d997885083b890083366b7ff159718593a
SHA512 bdaa3585aa3218fbdab2db94cecbfd015d9ad03b42c9748fa0ee65d0b011458de15acd6779736bed98b357a84cb323d20de04f80eeb54f8684e0c9fd38a08925

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 c77e41f01d98c0310ed5e5be91c8f531
SHA1 e7232d59f026e1dee4b6c25c57510d58b21c3de6
SHA256 848b4e5d105da6edb91bf06d60bd6ddd7c6b12e0143664f44ec659847ad0e2f1
SHA512 92f6e4e42c5663a5a5c5f252d8e1b8f6f1a746e614924656ef1f54e7fdcdae82f0ae896e60e0b17df105a07ad0925fe73228ecadbfd264da6da4c4965a84bb0e

/data/user/0/mob.play.rflx/files/.com.google.firebase.crashlytics.files.v2:mob.play.rflx/open-sessions/669CF41F01E4000110E8465F243317DD/report

MD5 92b0b6b8c93ec7a4df21a6262bcc4fd8
SHA1 fdfd0db5e0d0009a3c39dae994acd95d2485870b
SHA256 2ae25b24d2a22c5a9507352ae7bd34c230b641e3b8f484fd46c5d3ecab97a205
SHA512 47816bdcd552b267f4508463860853cf917ce9fd2879b86c82206c0b938045f598906f7b9db340efb7a79a73d8e16ad9e83d1e63b097739c1637f40c8fc51d35

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events

MD5 ac37e3dab956054afb9aa5b0225f0fed
SHA1 16fa7c45b3073613188ca25d8f5aa229b1404d96
SHA256 1a5e580431a853bcd2f951b8e88aca4aff09760cea8444999bfc1c199ff6c7a8
SHA512 c67296b50af8e04b251c888d7ca1716045ea65c8a5b0260ff95a38b99689142bab73988a2436b9b8591b5dd9b331e98952d2d317fb9523a50245859e89b8ff1e

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 90aaa6e835b928d4ece0ec326ee5cf52
SHA1 f9ca52acd18d0ef81d74503f145cd20bb8d26602
SHA256 b3bb0bbd54335d4047b5460fa5514dfb503430c5a794089cdd164052f6fc32df
SHA512 a20ec93e6853b647cb770aa13b80cc27a85f6e4c6814ed85e783a0b263d5e59e8e9860a4b6ee9d548c623f6cb45975f9cd69f2d61204a66ffcd3a87b9db5cd36

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 17c097b140e8afe3b3f6ddb31cc54a5f
SHA1 e951d0ee1c1377c0bb3da06291a07b6848d9f61e
SHA256 2673bcf6dc1400c2db29dfbabdb7fcc908b5ee1240d2aae68523f0210ddece71
SHA512 172e2c91afdd5565d3876d5890f96ae70d0d763ab2d8efd058cd2ecf277bd95aa7b6dbc078e235af8cb0bcf4c0959958788118311f784f5456f236c5610945cd

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/user/0/mob.play.rflx/files/UnityAdsStorage-public-data.json

MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

/data/user/0/mob.play.rflx/files/shared_prefs_sdk_ad_prefs

MD5 65026ee778e1372d9f4aed742772e893
SHA1 5a5f1c821d7639424f3c75a44468ab5f7dd4e8cc
SHA256 15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c
SHA512 589c4a12c6b6ec1a1cca957da758aaa900e68a23b4bc2f42524b0e8dd34f6c5378541d9293eae1ae8d478bf5b5229ce4218c058fc3b399eb5756afeb05c68616

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 40688945a00bc11a71fc689522e8c771
SHA1 777ddab5c76233622686b6a29dced4d3a611d725
SHA256 3f09c152a97c6016677dafd4f572396f1320b0525a215d38e611f5cad07431ee
SHA512 4d711a274043d19127baab21fcf7b3f060b97a9110454a38e2a9c82ef2756ad4da9b6e4badf263f87ce0dca1d18e2cafd17f6c4b4de8e2282a1d188fe244330d

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 4c404e2fbefa5596fa59ce24111787e1
SHA1 33a1f14fd7dd528cf6796227372e065345b7db0a
SHA256 ea4ecb837b79ac39ba976df7160e9831df9f128a0accf9d956bc0f1ffee5fe0d
SHA512 11de2731b77cdb75bae955443d4a2260d495a8ef1b0af8437a8529cc0e91728fcbb3dc28cd6ee461d7a8288813d3e436d44b67b294e93030c18369e25ddc6277

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851

MD5 aa0a939e89ce7be802b839f6f902a2fd
SHA1 bcd87130c2b77881b4e5721aa225b70b81649c9a
SHA256 2cf7c25d43885225353c7b7b4feafa2a4172f6552773a32d3f15eb6f5c1a1505
SHA512 cebd7112a959fc6337da878104d00bdb10eb8ab2897d06aa8f98318cd6dc931c63a7f3ba09552c74ff2b7ad605602cea9759efdd2ff48dc7a76aa13a8a8d8488

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 ae3cc5ef13fcb9acbe4df7812c100408
SHA1 2dc1fd4c22aaa5035d9888cec27688017f670dca
SHA256 a62e58a8a6d72c9b6d38513560955372ec9b356d6c521ed8e9ff884e3ab7976b
SHA512 e7c16c5390431f5b243cb3e5cd5b1482d7e0394a3e30a45918a84d0929cec764f1f0f5684ebde967675fcaf445e96b225ea871629c1aa9c1ef6616565279a41a

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 c28d8862b2568b00bacb1c1e782bebf9
SHA1 8515bd9b51cafc312252452d16e43dc83f865219
SHA256 9cc2b7a0a2e86faa67fb40414953ff7302fef8386201dafa40d3e20cb65cc0c8
SHA512 b85a61b247164b15e2c4ac2948be3b7b27456abe9aeafa2e76faa6c86456c420ecbc194c7741208bd4b649bc432555ab7147eab82c796d79464c24d9cc45bf81

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 bc55a44f133a146d13c6a407c8f1284c
SHA1 9dd683f0c24891a76dbc69d82355983396d98fd5
SHA256 e191297424c18e078eabc773ebf70d33c815d5bd957a068c19feccb71440fa0f
SHA512 01a54ed93eb5c3a15f0157d3d90ddb288f82c6bedc4553df4d615b81dada6fd21063facde9fcb4652db56ca7031790667bd0cb2cbb9bdd06714df8208631db8e

/data/user/0/mob.play.rflx/files/PersistedInstallation3009898604862416606tmp

MD5 a46bc1495f40662f8f56c2342874bab7
SHA1 47a6490ff2311e6e09058d233a77c603a601da91
SHA256 683f486a2c8d0970259ffe12ac14c614668f80d8566fd90d5488fab4255ec3c9
SHA512 33d022f071fc5ae9c6ff68fc54fefa18f7ab5f22a3d96ed470a4595ce0001ad86e394402e6b20a3234a439b776576758dd3d1fc6ca86fa6163c635687206097f

/data/user/0/mob.play.rflx/files/StartappAdsMetadata

MD5 c5ec03049f2a725dbe8dff5598ea7afe
SHA1 3272e70169bcb264b8072dec2dda5c2d2f7432a1
SHA256 8d11f72942817bf46c3b47ba9e7892b70b5ccee1e01116804ac1d5b683c48840
SHA512 8d0134a29ef6c20c39e755d4d36fee2c119ae32d6f05d1d62c8ccf116756f216e8a9825a5cfdd576576d79c9bac33055b47216efea7dd4f966a14111680588c6

/data/user/0/mob.play.rflx/files/StartappBannerMetadata

MD5 1464bff0fd2bc323b44f3019e32e43e5
SHA1 e723343e3d4bd22bab0510ab4d1233e346b4a838
SHA256 5225c5f27e665aa4efe233d9efa63a60e7a62171ed33c1667cbb5bf6b92e44a3
SHA512 dcfde2c757c5b83ed0060792c6900f1e2614410a2441563d2bdbadfc24326f73f2fa0fa7f2b7bd4555aa2a2b03c15e0ac3d28ad4836e0fda5484f00f8f2eac01

/data/user/0/mob.play.rflx/files/StartappSplashMetadata

MD5 84d44d07ee0cd574f5c73907b7a6055e
SHA1 19c7bb2bdf7f98e4ec69bbbd94981fd6ef8966c6
SHA256 e0a6705cbbe7af1c15e10c45b471bfff79dada9044f17fb7226c8fb6460f7ca2
SHA512 d8ecf9b58cb4aa25d14be75bdbd5c941dd5ecc98b85edd26110f93da78b552d3264b5458ae1e26a489f66e0d4771dc147d8afc73b6532a795e6457e27aa27947

/data/user/0/mob.play.rflx/files/StartappCacheMetadata

MD5 c41164d8f5044093acc85a4f93b1ca1b
SHA1 2001e355baa615da01da5bb8b60c88f64d0e57ff
SHA256 5e478ae54831bad55c4dcda78db4fa071411c98ddf9d057ff557a36b1cd9c3e4
SHA512 3812f2c85d4e24df3e68b0912a2dab1d1fff198ae0cd8c238e925239b19a084cbf2d58831bf5897ce764029f28bbe515b98acfb940ce985280beb9cf6251c57d

/data/user/0/mob.play.rflx/cache/image_cache/journal.tmp

MD5 d6ac8c8db0504502d7f0e057a78c5ce3
SHA1 8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4
SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
SHA512 100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb

/data/user/0/mob.play.rflx/files/StartappAdInfoMetadata

MD5 21159b6d4b3e976c8ec9c5dd6d0d6358
SHA1 8e1ed475edbb1561e029b1bd6ad97789791b273a
SHA256 20ca0d0d670b5592ef480d115559f9c5c4fffecae2afdea6c2a1bd204e49f0dd
SHA512 ea63e6aaec834e4b8f18066ce0f529facdea0a2e7ebaffe7087ed460ef3b5cabe4e5a52c4b2bc73f2798bfb345d3c138fd6d7dc6f2c577814c01eabfa08e679c

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json (deleted)

MD5 d165470950d875a5ef05e52b16fa2b71
SHA1 8eea6374a2f17e04a9265785fa1c805c4c3468dd
SHA256 ec0f12a51524d344321180bd9e3a0ee6056b5a7a563e1c42b5f1c8a9fc9c334c
SHA512 41e5625b05198d45d337c55cc8135651bd11b2e34ad264fa4ccc2766b1efa4f5988768b3323950df1bd523144bb759db5e591fcdff754ba7baf669c67a1383db

/data/user/0/mob.play.rflx/files/StartappMetadata

MD5 b6e7174242f446970d116d9b9b7fa375
SHA1 c0f9c2ee94805ca8b9475c6ff61d492c9319fc17
SHA256 315b1b7231380dba38106a66f1cd8dd2d70d98217c02f68652cc4796b0cf3fd8
SHA512 209d84612ecd0ee56b9a4fcd074b183b6b22d8f4680a2932fad030b9785003c18311ead5891991309b843973d79446e5655932339635854c791a2ad84960d0de

/data/user/0/mob.play.rflx/cache/image_cache/journal

MD5 e4a4ce6183a1c4bfb0bebc5f8ba3d058
SHA1 3510fbfd0d15e3d534cc3084cdb08e526bb88e59
SHA256 10ba738ea97ba8efd887cd7800ff8855de0f439dd4a6845e8187a36c53300247
SHA512 3293f60ba77db6b0d09061c99b5c60babdb214bd70de2787355c62804cad7be7134711825d0dfef179dc3bd9380bdf74b81f2157a1b40032f80261dc2d384420

/data/user/0/mob.play.rflx/cache/image_cache/8206b6f2500ccaa6cb6f648c602593e0118d017db752496d534aa8b1bb1a888c.0.tmp

MD5 53a7319c69c9e8f016991950adcc4d7f
SHA1 b5c7c6b7f1cc98c0e711aa4e41bc4ec700ac9802
SHA256 ce6b2d334f693f1550cf2ba39b009db9096609d1099961e60791829dc3570574
SHA512 428507d7e135c2b4a982a25a8509e8490f75d0e7ebb074d9df862aa02f1c5d08e31b3927bc862ed13899a3241912a192ce961aa4492784aa12c090819d66181e

/data/user/0/mob.play.rflx/cache/image_cache/0343ff96508f827379384cb2660ab6b0245bd5b8ecbeec52c7b2bb197a9a2cab.0.tmp

MD5 a3fe2746e9cf829910f4c8786ad6e687
SHA1 dc774326897412a9da3bb89a0bac04dc1cb403c0
SHA256 827b428a23d0f0bb73c9824f77ba85fda36676d1bee6c4ec221aa8afa026cabb
SHA512 34c519072195ca8194e0da236cd076a1c3b31e04125aa769983ee0d8b2c805155c1cbef5a0e7becfa2be491413c8ac0b0b9e3295b6cc36620fcd8d8034cc7149

/data/user/0/mob.play.rflx/cache/image_cache/bcadf1605aa1e1b62e9957e01deb60512575c852950edafb1ed71970fdeabc02.0.tmp

MD5 902e65822618b2e516ab7e13b7a3428e
SHA1 45d0f7c5944a1aefbd7ed8649455850276ae7c87
SHA256 9afd83aec788e9c06460d4843e28f716e08cef772ed9c5aee6373e104b3a497c
SHA512 e2bfdb33bf9019ba28eb50432b9a1a28b7c6a221d9c9858f46fbc7849c3376d4d1155a481d8de4cdf5a2f67f8c674f01a169a5773c98dffd6c83a0f2e17b21f3

/data/user/0/mob.play.rflx/cache/image_cache/0343ff96508f827379384cb2660ab6b0245bd5b8ecbeec52c7b2bb197a9a2cab.1.tmp

MD5 a2748c42f22dcab9272d412094b1388c
SHA1 56d2be801dfdca7b314578a3ba534aa31deab002
SHA256 8a06b9700e01b522cadf5d479ddae6fba02156f32e407294594cde58f351c4dc
SHA512 21640c9a16f59b0b998902c4a668aa7697829d0579dfcd317007e69a039ed9cebcf597f6136fae84edd80d5939972b1cf192bc1e64fa6ffee0b26b334f37abfd

/data/user/0/mob.play.rflx/cache/image_cache/8206b6f2500ccaa6cb6f648c602593e0118d017db752496d534aa8b1bb1a888c.1.tmp

MD5 f68e85d9c1a2dae82b6ea25b3ca8de4c
SHA1 9236db03d8761bb2b43c19673eb53cdbcf811341
SHA256 3576f55972ce9da667c6456125490e552a6d8f81dde0b1cdefb390efc650c825
SHA512 4455e09940835c6f27bd8b58ba5edc3473fe05bb7517972dfacf0c2baf299f400af8c5e3410e4cf38d41b3e3853c7dc775f15675f166d93e5eb882ad82d97be2

/data/user/0/mob.play.rflx/cache/image_cache/bcadf1605aa1e1b62e9957e01deb60512575c852950edafb1ed71970fdeabc02.1.tmp

MD5 72ec4347f3284649543e20e08cae650a
SHA1 a80d242b502b8a93099a6981d837dbbec4b8585e
SHA256 2b0cf0e164ab63f5a890c6dca572933fbe788025aba380819cb4157304e8728f
SHA512 730b12998a0e3a4bc344c311c792a12491fb3e90a1b094a3eb30d5baf5e8934880b01872e412468ce600bbf7879ac4eb9be31175e678dd7d1f26cb2aaaea1452

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 a61b921600dab0141ada6e95f4be855b
SHA1 965d32ad02cb7a01b0c7bc0c1212f451b34214d9
SHA256 dfa80f2fb7b40ababa90b58e01df39ebc25db852c1762e3103fb5331d2b022e9
SHA512 22ac4bbf23a43bf2eee42a2d6333664953fad77fcd37a49ec2d1e3315323fb2b899e2df04d5604ba1d63c14f9c0faa8db8c25610f24f1f5e0bd9ba12b3625e7e

/data/user/0/mob.play.rflx/cache/image_cache/39a51796b70c722422566ac942821981838c509e410a730699b28a232f5fd6b3.0.tmp

MD5 b719819c4f8871ceb0611baf02ac3c25
SHA1 f9ff885ce8071db26ad1bf3b17bfe472b96c2420
SHA256 4922f7d44d7cf9e0014fb3495dea55dd805fae0e1f7de583d1f1bbc4fb7ec96a
SHA512 b79728ef876a5c98ffea964e8a290080d87c844337253d0f75f165af219b11011fe724bbc7e8d52d16647c1be9f548526a079c46f2811ce86829899c70516719

/data/user/0/mob.play.rflx/cache/image_cache/39a51796b70c722422566ac942821981838c509e410a730699b28a232f5fd6b3.1.tmp

MD5 f2dcb9a666311de3980344aede18ed16
SHA1 205ba5d3078418536c6a1629f83f3a652765637a
SHA256 77c822eabc786e1a05602d3498f23d1f098aa2eb72912bb06607844c4f57c8b9
SHA512 6306aea10dfe92491fb77701ec0a9bbca3f002ce26408980a0df647f8424b47c1cd22c1f4696b813429ae96686e9fe47fe98e0f20f5be592a2c8bf1397ddb59d

/data/user/0/mob.play.rflx/files/close_button.png

MD5 2d858e8af5d9426fe061df5c82ffa6ff
SHA1 bc1b2eab876aa221b6449d11e482de24b777d58f
SHA256 73d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835
SHA512 aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c

/data/user/0/mob.play.rflx/files/back_.png

MD5 f133b06147d3a62e6e7694a7cb9f9882
SHA1 16aeb42895bc494690dae7b839ee16e13ac9364a
SHA256 b92364b82cdc70e842fe6b11297cc3d3d0e93a348bde284e1b323c80e677a299
SHA512 d8f895ce05febfa4fc4d12184ee4c64b3369655efcd07adf5b5473a1040f163fb016173de08e186e94a1484d9f27d2e02b5b6df996037cd24fb309206abcd960

/data/user/0/mob.play.rflx/files/back_dark.png

MD5 465c157abf1e96bac94e1106b07a4df8
SHA1 a526c26fdec2d0fcf7a9f5a3a40e848ff8ecb885
SHA256 e6072121a50f2be4073367f5cb2f7cde4ec63894891271016427e9ceee42fbd8
SHA512 e1de528bf4af3de0660f7b8f2673e4877e58b9d764d2798886967fa4ecad73916385ce73523b33025952cfc9f18f678ba3ab05ead40131aa7e37a3ba4b6be0e2

/storage/emulated/0/Android/data/mob.play.rflx/cache/UnityAdsCache/UnityAdsWebApp.html (deleted)

MD5 60613793d0bce882b80f2429f3b50edb
SHA1 48b22e5a190e572e9014a10c4a4543e57f2cb332
SHA256 92eadd3cdd8a390d38fe5df7c795f9398dd143f7de64937592ca16b69e0cee54
SHA512 81e13b31b28f27abff6f67a827e4dbafced5d0814d958010f04f741a45aa3d5b0d991e9672f72e93d6d9680e0104a865ee33a68c29ec976c96c0743c89500993

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 6dfa38f071193d75ff2ba55e63ebb7fa
SHA1 817a439e24b356284adb18d9ba8955be775eeeb9
SHA256 dea845030231fa887a73d0d2d7f59759b4bee18e07dc80e83ac580d096956ff8
SHA512 cfcda1b47b7da6321d6ea29586e84d6721aa7ed409b44132d57e9a4423b1c23cff55199cd2d91e1822a75f3be0f720023984629bd4a4cda084c57d7c6ef4a11e

/data/user/0/mob.play.rflx/files/profileInstalled

MD5 0e195e27f77fbd6b567ec28e6673abad
SHA1 012ff6a13094c979aa0377dfed6e3b46115c7521
SHA256 815c6c2305cf15522541dd10356b17c9fdfbdf1ced5b990e56b6c702e53ec25c
SHA512 30ef357342e232b3455b0bc439314769005f92ed9476297661d998f5d0ebf53287935958ce4eb92cc7a5348da6ac990f7bf8640dbdaed28c94af8744947b8a9f

/data/user/0/mob.play.rflx/files/forward_.png

MD5 9ee047a6801bec9459a9dd5ec7068078
SHA1 1aaaffc208e2d86e53fc031e8413169850e65746
SHA256 9f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12
SHA512 8245818df5ffe06c8f369c8d77479f9f2163d10dac36b0e37c834018b713dc8b063ec1de1862fe16a8c1a769b496652be880ddd48d6fcd24ad766a395bc3ff24

/data/user/0/mob.play.rflx/files/browser_icon_dark.png

MD5 935454787d07b55a0bf196d23a3d07fa
SHA1 ef94b3ff30de349f177c55c1ac7fb4ba962ed281
SHA256 62e8f7f85bbeb88d346807f2446524c8ae1779afd61ee23e5ff6f865a5bb7a20
SHA512 3783566f7df41eff2862cbac6d132707e352c9ac76bfa8a14b5551f6a824af84e726e20307fa5f95b9f1ee1388300ce70ad3a55202aff75eaf1cc418370d18e5

/data/user/0/mob.play.rflx/files/forward_dark.png

MD5 12bfe20382337a84c0fc004a52b9ba9b
SHA1 ead15f7ef372c16f78060b8f8c5fc6e0ca6a96f9
SHA256 621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5
SHA512 7a346febc49154dd348be77f88c6e7ed5c7a531c2fed981f12c40e22a19e4e1a5c51fa766b3122898d97f05e1546a6f2a29b598b0ff441cc7de5e3c505aa33c4

/data/user/0/mob.play.rflx/files/x_dark.png

MD5 1b759349f0bf3e55c51e2a2c2802b3cf
SHA1 5a608a093fa5f513d1ba52e8a9e01f693c47da98
SHA256 59d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443
SHA512 3b39d22d0f8368dac2e36884b0316c5aba24180f51cb3a993fdefcdcfd5a36823d6c02c75863cd5a3bc0808223dcadf9934d548c433332bb9528f0eb8cecc0a6

/data/user/0/mob.play.rflx/files/empty_star.png

MD5 76ce13c6312eb334fd351e3b5cff4bf4
SHA1 203bd863b812c071ab3ae25bf4ab2f9c4d42942b
SHA256 f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8
SHA512 d06ba34786090e3b027670a17910d2e35f48eb7bc639e6da1d08214534215797dadd1a56be44422b176801e5d1a1345cd2bf29e73acb6a49bc9a2f7670710783

/data/user/0/mob.play.rflx/files/filled_star.png

MD5 9db1f35e41f85aad692b8cabf46526a4
SHA1 18c91529430ea98ec6874a39811554dbf9caa6a9
SHA256 61550b17a9d3cd07bedefc4ee59c88b426a138151bac40802cfc512fd2642a36
SHA512 785b85c34cecb010e62b8643738d82c26b4d2c07092e3da8e8775ac1c10044a09ac7e1ac5f1cc01ab2c566bc2150aa406ddce87d91685a7d712cfe3236078d22

/data/user/0/mob.play.rflx/files/half_star.png

MD5 a40e6a567b7aef329bda0ac200f7a23d
SHA1 2fa463649c7ba586b28670675a15e0d7a630c7e0
SHA256 ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556
SHA512 5e77ca21445a09aa903ca08c10c1bcaf769d8273368b7981aacf1bbab08cefb7a521687e78d280828f46b625c99fde02050f5c914dd4d07fd742723f7713ee4f

/data/user/0/mob.play.rflx/files/logo.png

MD5 515c02d5e8e7f90a61ee1bdc68b6ebf1
SHA1 e55704189d65197fe05a9b4a23b4485cf3821ab8
SHA256 cadcf1170b3525a41737faf72b9c2fbf3282a5c4a8cd341518512177e5b3d36d
SHA512 7d27ed2cfb09bafea7a1b4145157c8920c631a332eeb1380ce1174676b9b119c3bfd928c344aa53c5da763cfb79403a4519354e5bd3df99356db4a3bfda340b6

/data/user/0/mob.play.rflx/databases/StartApp-d6864f2502af7851-journal

MD5 4f34ea344bd027ae8d9680d19520c8bc
SHA1 e9feeca96de2ab8cf5e08533239004d68ff997df
SHA256 4f7c9e7521dcefa135e49a85c35c6fcd42145363038866d9f5572ff47835ce3d
SHA512 0b011c153b736c9cd7215e5f8fdf389fb4d90007f8fcb960041a079ce90c0ed43831a8786074e0a0921d477af3af2734fcf113b13fefe8f6c92b2f88497d276a

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 ddc58c0fc7d7cb9f71235ae3f4b111fc
SHA1 21d1745adf61beb1e5cf716f9a4ef53eab30327b
SHA256 0f98d66ad84782bde61f098ee2b875e3efa87afbdbdc0452d5abb9ba8e3c8565
SHA512 dbf0b7f894751056d5fea9c66ddeab4670e8dac492aeba143b03dcd5d15c3d1581be3ad08b90d22a1a4e946e60b563a7a3d749f9aea796acd38a4d1b99b40fe7

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 8f0b579fee3285770f2e1f948df5c2f2
SHA1 317e723f7b46c3170866c4ffcb6ee62a5f8f2312
SHA256 de404db4f1b4da81df2f7527dc83b492979e099f5a63c241d31f24e4dc94fbff
SHA512 67f5b2b1a0d8dbae81c2031b4418861a504478a3acd9c2302e501bc27a2fd7ca61465235530d914dbea05a490494edfb064332977d31c922b999f09edaab2205

/data/user/0/mob.play.rflx/files/UnityAdsStorage-private-data.json

MD5 b152c52b4a80414ef7fec4e94e14d9b0
SHA1 68a87e1bdc8ba3a4015190aead39ee17b96e2b00
SHA256 f9b85afc8e3dc5a659adf5df28a8e0b45d3236bc75eeaa0ad71c0b5fd3be72e3
SHA512 784453521b845f7ab97da6dc2881f279836c26ef8dcc1996e4da7c939567723b30d9ee1c7fa309fdbb0b48d24268c81a2c534e22cbb8161e56377cf78dff6408

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 e4bb529dffe4e403a7723eda2e4c365c
SHA1 4a3e738ec736325d8fab9a8a8a2fe9011f7c4fe1
SHA256 ecaed631bdb9e9ed6e1cc72a153142ce5d6ef5cd12b2a72fb0d34ae773ad5359
SHA512 9a0abfcb16db1af10f3f8f04d4fbc4d5ce3c025f238415d981fdc47635b46cacae935bd954c190a2b063df4fd0eac06122ee35270e2dff942c4f2ae27ca54a33

/data/user/0/mob.play.rflx/databases/com.google.android.datatransport.events-journal

MD5 48cd527067c17943df9d4af757091de7
SHA1 31402866b025965de8d3fc1618242ddc5568a714
SHA256 6e88c59678b4f89a3bacd01622c3c145e4418bc766d6b80c669aea10e151db5e
SHA512 c99d97094f11d2919d849fe40ea70e5f5aa7573122331b02ac6588220272469e357b1f770708c181d480187aa02a0c2d0c2ef936961dd0d141262ad9dde86194