Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    3028466s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 07:33

General

  • Target

    f3017307f70149aff9c02a03bab62bba11440ec7f6b94ba3ee05f1f0426f8316.apk

  • Size

    26.3MB

  • MD5

    6d0efc801599d271028db156e3f7af11

  • SHA1

    b714157eb5d9bd5a465512e6e92aa7fa292abf3e

  • SHA256

    f3017307f70149aff9c02a03bab62bba11440ec7f6b94ba3ee05f1f0426f8316

  • SHA512

    32df3e11ff4c3c0161cc21dc238346d5d6e209d02d0f8d23862ad2fd3994d82a40ee808021c224244a5c9ee9646832321ba40de9d56edc2fc261c02d06c1c736

  • SSDEEP

    786432:2QEdLlmhOpDKORH4kFJHMaOhSSfgUO3Dox94BvhU:nEQApDKORdsaxSfg/5bU

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 3 IoCs

Processes

  • com.cyou.suspensecat
    1⤵
    • Requests cell location
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4256
  • com.cyou.suspensecat:channel
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4465
    • /system/bin/sh -c getprop
      2⤵
        PID:4518
    • com.cyou.suspensecat:channel
      1⤵
      • Uses Crypto APIs (Might try to encrypt user data)
      PID:4553

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.cyou.suspensecat/app_crashrecord/1004

      Filesize

      76KB

      MD5

      5a3d48496e7a8676f15f2d441e03e682

      SHA1

      157054dfacf92372d7df2df3297ce97853934333

      SHA256

      f58525bbad9207d76a1e484884e7c3eec70938b7963f3004c214640936fd8d0d

      SHA512

      662b6c09104e44462a3117b19dba1348f4c15c4626bd080cf485de4e16462d6e54648a59af08db7a7c2223b2d2e3baaa3c7a5f56ae8aadec4aa9440fde92466c

    • /data/data/com.cyou.suspensecat/app_crashrecord/1004

      Filesize

      111B

      MD5

      55e17ce50739fa09bdc691a2d5212574

      SHA1

      b42fa918665d5016900dec60e618890e41034605

      SHA256

      84f03e26693e915a690ee77e8c280c2417e1420396b359d3db3dd94f4878babf

      SHA512

      c13a73c2dc343c73455598a4dc5ea3b50e2be517da060db7fde9e29af4ebb21cc2e7f5877bc1a23a353111f63908e3c62f68004b6ebcdb8940bb063906cfa2b0

    • /data/data/com.cyou.suspensecat/app_crashrecord/1004

      Filesize

      237B

      MD5

      711133adfdbf81c9d2934fa1bfa31442

      SHA1

      ae231630eb90bcdae53ad29ea8479176dabef32a

      SHA256

      f672b88ce1ac8c258c50befc9f825d99135c6306f1f6973fa154bd1bb18fbb6c

      SHA512

      41f185d8529f2df3c21d4943e197d108744111e3205f12740d70cf0ee516c9a3f99ce46680855d9527a8937f50a867fc76efc1ddfaa9bbff082d5596b564ddc8

    • /data/data/com.cyou.suspensecat/app_crashrecord/1004

      Filesize

      237B

      MD5

      567ca9a6bb7391c41b789cb947a9a773

      SHA1

      b014b6f8557e1ca978f567d7562931ee51eca4e7

      SHA256

      3dbef08953493a287b9e3d39b93790d2c096c6369f38fbf5a4b9df85398a4c2b

      SHA512

      838f08b4660b7143d9baa2f15f97f5d3967de3baf5a5964a02c3cef09b32d96d415137bd2b3816024ce74bd0ddeffcec1f796b90cc56dbe9b39726b2c8fcec26

    • /data/data/com.cyou.suspensecat/app_crashrecord/1004

      Filesize

      4KB

      MD5

      aa99281ce0cd69a9302f8b64b918ad75

      SHA1

      ccafc0e5fb16198e466b209a888301f4100fafe8

      SHA256

      a3cde8388c50e78c7b3c8dab1d0c46c64c375248031adbb6a5802e3da65bb431

      SHA512

      a8b80f09a555652d3e4b9775b6aa58341dad7fb120509e128df417533ba361353b19530306e8691f1ce5fc0c69f1a89d29bd2eb176291a5e85b945d14c9eb085

    • /data/data/com.cyou.suspensecat/app_crashrecord/1004

      Filesize

      229B

      MD5

      14e13aae0a13b336ed2c605c5afd92db

      SHA1

      f8f121a5376f6a85ce9e5894ca8de6c6f0ffbff3

      SHA256

      e2c5c7305bec611061b4dd21d98622be8263969fca784eb4c56563353f1b4795

      SHA512

      66aedd29222d8150c874a911f56f66bd8f0ed086fcb87ec4c9397fb4fd5ff4540317edbbf6191abaad4a085db67d3dcf8e0dce354962e077dca6b713d44d78be

    • /data/data/com.cyou.suspensecat/app_crashrecord/1004

      Filesize

      58B

      MD5

      0d210bfb2a0e1f1b4c082a6a0f79de07

      SHA1

      bb8ed9e364db79d1d9f2fcde3f15091893222faa

      SHA256

      988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

      SHA512

      536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

    • /data/data/com.cyou.suspensecat/databases/MessageStore.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.cyou.suspensecat/databases/MessageStore.db-journal

      Filesize

      512B

      MD5

      3588d50dc394071a018750913c46b738

      SHA1

      8bf2461c9cc1543c5afbf71208dc8a14c8f3d218

      SHA256

      70821d324ece84348c50bcd081736a9835e03db24abda61f5e4d59b41fceeb1c

      SHA512

      dae2e7350a1276bf9aa78bacf11f191b66d3ef904e19f9954da96e27671fd25821e326d4c99464955675f72df95fa1e9a783a85886ac12cc1e2f12d59ccc81af

    • /data/data/com.cyou.suspensecat/databases/MessageStore.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.cyou.suspensecat/databases/MessageStore.db-wal

      Filesize

      48KB

      MD5

      b359cb558bad4bdb2422714d69cc94f9

      SHA1

      b60c7f4d6d021fda17cf4be17a0273ab4fe7d64d

      SHA256

      87baba2a0c9bf80f96c7f7771da9309ee15c86343d52eefcf18901ca0f62c79d

      SHA512

      d37b97a6bb081775b0131fac16c2dd4d2ba4de49846fc2c261c17cc6b481fd6d1c5027bb30838c104a8b0271cd1369a633b0102c167980772ac40f6f347b3312

    • /data/data/com.cyou.suspensecat/databases/MsgLogStore.db-journal

      Filesize

      512B

      MD5

      7f42b96e5100aafff34adeb99910f351

      SHA1

      6017389579047bcb694698f77db6396b76c3a74e

      SHA256

      5638e0716a75dad3d5b8c0407d57c5a73c377c2bce63d1251d1455eb5578047e

      SHA512

      053d35af70b895b3c15c882968cc9b170b56803d1969f1265f5af4113e77f567a4eeda5d03ec771531dc27a2d73a34b557604dfa756e045dccee31469281b509

    • /data/data/com.cyou.suspensecat/databases/MsgLogStore.db-wal

      Filesize

      68KB

      MD5

      d961614114756886b47d634a1eac530d

      SHA1

      5f383dea2ae71dfb39280daf206f4a9f7b146682

      SHA256

      15f781819cf01a1e08cf9d454c63b005e3f837b79191007738c775f6504a9271

      SHA512

      6e58a6f692067a6eb08dcb23be84871fdb220c9190ce2e4141933b26c7c156cfcba2651d3c5a0290bf015d40a30ed1a6751b9e4a6ab5ffdfa9dd72d915c088f3

    • /data/data/com.cyou.suspensecat/databases/accs.db-journal

      Filesize

      512B

      MD5

      a1e2a612ea4fddce758cdf3466ba3d1d

      SHA1

      f45bca709afe105c7913dd88c0871658e71e5f7d

      SHA256

      fef8f4753eb43179cb45f41563c7929a3aa2491139274acae435c1566765b2ab

      SHA512

      b410c9cc715b7580323bfa10f063934c347a29abf7a1701c922a0a2e6d1fcc478197077a6fd43ac89d9f085ec4d422be4c5be0ba8ea9ecd449c49874e1c30a37

    • /data/data/com.cyou.suspensecat/databases/accs.db-wal

      Filesize

      32KB

      MD5

      750bf23e2c1855b6d4d17b7f125f9ac9

      SHA1

      f4f092e12c3dd3bedbd46c52f54686b556ce4a56

      SHA256

      4338311e2a97ecaf8332bb70f3271d855f9f752cf9077cae5a0d875c0a7dd92e

      SHA512

      15ce4638bb7fd7cc49cba5f0651da3ed6c35b201300e693604b3de0e13bd10929e76dd18b876ae337a93c8b3c165d271610cea0070a138c516c293886aa51074

    • /data/data/com.cyou.suspensecat/databases/bugly_db_-journal

      Filesize

      512B

      MD5

      5181d52235ed91a42860a07b0d75f38d

      SHA1

      cca99db2a9d83fd3f645e1d86ac02fdf7c5d4c57

      SHA256

      781f09f5a06ffb441d20e04a6e4b98ece241126a43ce4619c0ebaf36a69b1d47

      SHA512

      78c565449c067c9638ab1712481f4dca5782ff6d18b2edaf845a57827ffc80b7ff84e0d72527846ffbca381584a9c4f5fa92a6119bce95b05c2fba72ef0f573b

    • /data/data/com.cyou.suspensecat/databases/bugly_db_-wal

      Filesize

      76KB

      MD5

      4d4c47b2260f4fa5a65f9a4d32643a07

      SHA1

      60a7630ef7a0d942286902d97b1b1cb9e910c273

      SHA256

      52dab3550aaa6b6e14f34bd016cdcdc9c3443ee1bf43540679a6fdeec018e0ba

      SHA512

      87cfb1d7fbc76f95e91700607ff0aa6ddafcf8da6eadb07459538c63b7c82431ff47a825b761fc03c720a7467c3f7f433734176b771e7b2f7f0fd1c028de55ff

    • /data/data/com.cyou.suspensecat/databases/bugly_db_-wal

      Filesize

      80KB

      MD5

      7feb8930219f021e90d47eb0db157e57

      SHA1

      84306840696fe6fb1527aecf3462fbec6830ccb2

      SHA256

      708b89e69aa2239aa45b2ce20f2dffd90504cd73e03f0890ca211c9efa23012c

      SHA512

      b60b75b311a530dec6a5c1f8ea35193e4c403df276bfb531879fb5c70093da7ed188167b3026ca148dc20cf0a3a5747199ca5cad770be7da922b06c5d1b68ca5

    • /data/data/com.cyou.suspensecat/databases/bugly_db_-wal

      Filesize

      68KB

      MD5

      67fd4e643e26785112c447dd5a09419e

      SHA1

      59dda2de1b607c8851d7c914f8a746c1e41c4652

      SHA256

      9b52e33a4ba43a58e1f33ab13e35ee0dc7aaf6463385b37cf2fab3a62d77b601

      SHA512

      2168265b23b5c5934eed8d5a19d98de7fde94ce4226ba2e0382c66efa6a0101282871b9df98dfcf8a81a1ea61186c3f70e99f33b67ccdb0324dd7f2b63382479

    • /data/data/com.cyou.suspensecat/databases/message_accs_db-journal

      Filesize

      512B

      MD5

      28e3c2764a1c28ab8ab0c672fd3fd5f3

      SHA1

      959027797cb0c9a36464afdc14837757c573345f

      SHA256

      67861d180ec3994c1236f4f17b6f169e986eedf1cc4d502068eb6f8dcb14a857

      SHA512

      5963ff2ca2b032c848814af88a391d9635dedd473f14f116d2c28b03fc1464ea3bf7f5934b08f2e7fa51b6e6bde947c75415b49efa5f8f6407ae059842c59b49

    • /data/data/com.cyou.suspensecat/databases/message_accs_db-shm

      Filesize

      56KB

      MD5

      cee433c223dccfb1108c3f3112a0c7de

      SHA1

      91f237c6a58968f23ff1dc892a2f370eab526e03

      SHA256

      764653fc120ed41b067e1539355de8cdc965277d2bb832a970651a830ff9ff52

      SHA512

      22f1480f2c57aa05852d150438a53872e0f533e61a0d7fa3d205573b5f8d5cac2a1018a19f183ba456be58118eeba553d7202aff56242af6f8b95611ff439627

    • /data/data/com.cyou.suspensecat/databases/message_accs_db-wal

      Filesize

      44KB

      MD5

      c855a84c70f5725144b779d7f88a771e

      SHA1

      72f4a7e7fb3b14df53220e09439cb2b9f58009dd

      SHA256

      e0817ce03db8c7322dcebdf2c2350bf7e28fd53673e7a61e401e81f4566a8c79

      SHA512

      04f4ce1832fe94dea0b478fe21965edf81dd59190c7c0c0b05141cd67b544554548b010dffc0155dc4d90567494b2f7e982c1480363e70557a1a3ef787257f9b

    • /data/data/com.cyou.suspensecat/databases/okgo.db-journal

      Filesize

      512B

      MD5

      8491101687880088cb335cadee790dbe

      SHA1

      e05b8f4cb12174c4e06f191c64c6a712c0111b34

      SHA256

      7de2a4187e71899578247f672f139039ac4aab8b21f2afdcf96a48a9a955d07d

      SHA512

      91791bfaac49d19d0c0fc4cdaae35db2e363d9ad1b3746d5a357f968ba16cd51a679f0b8b9c5f943726e1694ad66e493ce546cb9a35dc42ea221a8b8952f8295

    • /data/data/com.cyou.suspensecat/databases/okgo.db-wal

      Filesize

      56KB

      MD5

      8458f8e31c22cdee198a24ec9094e104

      SHA1

      e12fc4c6b88e859bcf3997bd7331b3d1992068d4

      SHA256

      a3ac3a3d22d79dcda079f10dc6296b84cab3461ccfba2fed13392dbc331fa04e

      SHA512

      c7bf7622bf0c2f6a36708b506ecb60ae4bbd867575c27371279352c3def9cc43bcfd53db39bf57169f0940fc79a0f525830866c869ace8eae19c8615314e7dbe

    • /data/data/com.cyou.suspensecat/files/agoo.pid

      Filesize

      512B

      MD5

      36709941fc78c2e4d08369d57cee53a4

      SHA1

      053fc072b88b43e2c56f5e6605a63e401ba6ab4f

      SHA256

      c89c17669945b08f03a63e060796951b65b6eedd8ea111ee11a212d4512bc94b

      SHA512

      7290607a7cd91b911fe75bc8f43b882f06cac1f763010fbe26dba3a5b5956e472ac3ac37968a72551dc3a4210d502eeda1e3006eed50df0243855d484a31ee07

    • /data/data/com.cyou.suspensecat/files/agoo.pid

      Filesize

      4KB

      MD5

      35e45f02b13a9324ddeb22492ca48711

      SHA1

      e155f6b1b353d62c1fcddb51da94a4f3f7180a22

      SHA256

      c14b7507b6b2377a421f666d75a5cdf559fa8c78015890ae7d4388c1f729ad6b

      SHA512

      655670d131c780e1c28e0237779156c29301872784dccf64012228665f7d72bf8cacb27632d68b5741147074d1e42083f39b835542c58ce7f936e882a690c1cc

    • /data/data/com.cyou.suspensecat/files/realm-object-server/io.realm.object-server-utility/metadata/sync_metadata.realm

      Filesize

      4KB

      MD5

      6254469ee7c013378b88a5ebe948de0a

      SHA1

      1908ce3b378e475d880ef201036165e226962265

      SHA256

      46cdb298382695da9fca0276bdc8e65d38ef414ad1853f6f57899711e38f7295

      SHA512

      de120c30ca13f3ad069f37a3d83f50fa82d3e68d7eb6912879e06e28ccd08835830d157462ca602ca8d82f616152ac137dcaddc10924a2679d1f4d2ba0e71ffe

    • /data/data/com.cyou.suspensecat/files/realm-object-server/io.realm.object-server-utility/metadata/sync_metadata.realm.lock

      Filesize

      4KB

      MD5

      620f0b67a91f7f74151bc5be745b7110

      SHA1

      1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

      SHA256

      ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

      SHA512

      2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

    • /data/data/com.cyou.suspensecat/files/realm-object-server/io.realm.object-server-utility/metadata/sync_metadata.realm.lock

      Filesize

      1KB

      MD5

      f22d17ec898e5ea052a09517ea0e3190

      SHA1

      5ed49b734f5fd0a986ad35f5e015384c1852d229

      SHA256

      d0be9e4963d7b27d1e138c17b2c1726169bfd5d450dc9c06df167a9c8b535ade

      SHA512

      2447ee6592950b91eeca9be2445fe6115d99a162afbf69073c213b63aee9ee65086b907f8e59fa8a7db22f4b3902e10516824381260d39febf364599f6aa1cdd

    • /data/data/com.cyou.suspensecat/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzODM1Mzg4NTM5

      Filesize

      1KB

      MD5

      d55e9ead0d277d710896e86175f6452b

      SHA1

      5054aa073e3d517761ad56a6501e3c086e541396

      SHA256

      a1d01f9677271c5ce972998c69aa9afdd136ac431622150927c43c932c84eac6

      SHA512

      6524a8b5f7187ebbd54f4c2edf6534784a30d17c6b5545da238cafaec6a44f3cbb693fd5b555e5d30774dc5c020a57539d17f472ffd639bda07ff4e7445ac740

    • /data/data/com.cyou.suspensecat/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzODM1NDE5MDUy

      Filesize

      1KB

      MD5

      9364514a2da9938962b1814db37d8952

      SHA1

      1d9eb4ae1427954369dd2200843ee4e178d735fb

      SHA256

      2f5899ec4a0c15e52124fe7f7789e9f35d382b3c4f590d51d9b7a89f0ce86665

      SHA512

      70700da74827a82313d761624a6d37c50e787a71a9e8e8201a76493a986b195dab96c03342be41435dc922d1c1a7a2cd31e08c82686fb177765d1d598f1cd11e

    • /data/data/com.cyou.suspensecat/files/umeng_it.cache

      Filesize

      498B

      MD5

      2bc7cd0b7f471ebab80dc2f11c03867c

      SHA1

      f4cb6642c35f4a9c27a43bac57045bd79a558b79

      SHA256

      9c00590cfe8c4be98cad9e303a9048a8b1dcba6d5c76eb660f8040deb84f4ca8

      SHA512

      7af667ef3d2c161fdd5a654d251ce7c2aa208e2183bf0fd6066286663c1ed8645e5cd48663964a7fbce9f8f0b1911da2013fbc9835989e7ef398cd3d9d05bdc2

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      111B

      MD5

      e142d22240ba4cbd69a208313d1c8227

      SHA1

      7f256cd87a1653b0158588dd7bb646bf680a570c

      SHA256

      d5d8ad86064ff0b2da6d6e2c03bf4325fb4cce3cf7eab4bcb51add2cbc33bee4

      SHA512

      e1e1a2fb7a38c1e96c78b3a441b582b7f8586deec3842fb54b82811b51b8104c4cd2e49083edd2b2a2418f7be84319e49b7b70365f8ad5c5ec04c2459e45d2ca

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      213B

      MD5

      22e2f271e6b542421cf05ad13b586d5e

      SHA1

      6565993f6aa1594c1fa0d2ca167c4df75a85dcdb

      SHA256

      7a7261c23f83c861db34245f4c45df99d3e1e894fbcd973cabdd6f2307bb33ee

      SHA512

      73f582be68e4ef5c80185a369afedd66ef8e0782677ae078497097606f5ad267da70fa04958446c429d4a51dd80e46206f2babe72bce86c05f6f8a97e38f6536

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      32KB

      MD5

      8ff62ef9d8ae4dadad3511947035e313

      SHA1

      c08a743c9e3e59ab70e5b51f3dfe7fc91a4c7a19

      SHA256

      ebc1f5116fca0e8445783c524a76fcb5adf357dfa6bf756a71549d6b2f9d912f

      SHA512

      dcac7e3f4a6d341d09d83f1a16fa37d70372f05b64c9ea6c6fed3bcce4919e46b2161cbb8ad4db4f114027a4f2d5e35306ddcf95d01de65b7825b9856550e31f

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      111B

      MD5

      b538e7c1cf7462320113c5d0e823123d

      SHA1

      d929527b9c7968580a10bfb38385854b10dcb4c3

      SHA256

      8b4d1c67e9d416dba709e536f75fe53b04643e11a14d437a71f1093ce3e979a4

      SHA512

      21c7a0301bde1e2292db0f5e39101a70d19a08db29cfeea1bd3725fbad36f21b30bb044d4d42fccee5834137d29ca5390fcfe93c8487accdd0bc324ac61a5aa1

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      167B

      MD5

      e1aaff4adcad8af93c6363dbc0dad6e9

      SHA1

      60a82d1907a45cd140db48300e792c41593e41bd

      SHA256

      cac2091fa03aef279b3d33a6b19bf753221d7cab4d3987da7d20da54f4678c1c

      SHA512

      c0d5d1e9764c40e08c98456fbbef1eadce852aa155ff246db99e9d6d21f13d9410976074a53e9fd50f8dbc8dd871b6832cdb57d65c4d4466f2d19ac274154073

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      68KB

      MD5

      9e32bab088f8364bcaf9010dcd67d806

      SHA1

      2a9a8d44ebc20f340ffda067b6b87ed3fa5828b9

      SHA256

      558f2700af8d31732c7382b7470f9d5371dc251d6334d66f98090ac3e8dc6cee

      SHA512

      be9b1867291fe804c5824d7b6d3e9b52eee07a1090a133f460a3f1002cb81d29502f9fe6b54f26d59c9fe17aadfdc6e19d5c2ecc02e589bee7fdc9988c895825

    • /storage/emulated/0/Android/data/com.cyou.suspensecat/cache/ad/journal.tmp

      Filesize

      31B

      MD5

      8c92de9ce46d41a22f3b20f77404cc1d

      SHA1

      8671a6dca00edb72be47363a7071be65cf270373

      SHA256

      68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

      SHA512

      30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56