Analysis

  • max time kernel
    360367s
  • max time network
    153s
  • platform
    android_x86
  • resource
    android-x86-arm-20220621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system
  • submitted
    18-07-2022 16:15

General

  • Target

    d34c5e8e5cf4500e90f6fbcd3f7ed79a289defe767558cbc034a9cd9747b98bc.apk

  • Size

    16.7MB

  • MD5

    fb2ec546aca162a8fd16e8f21b374d27

  • SHA1

    ebeda0bf39630442bba27e4df261aa488a5fdadf

  • SHA256

    d34c5e8e5cf4500e90f6fbcd3f7ed79a289defe767558cbc034a9cd9747b98bc

  • SHA512

    675230150fccc36b9df97e9158781a735ed9f4fd77a1ca6989b0485e6221ea145b5a592655b495f140d6d801d4e775934736014a6a2b6135ffeb69c70e9d37a5

Score
10/10

Malware Config

Extracted

Path

/storage/emulated/0/zymame/gamelist.txt

Family

ryuk

Ransom Note
MAME4ALL GAME LIST (2270 romsets) --------------------------------- Name: Description: --------- ------------ 88games "'88 Games" 99lstwra "'99 The Last War (alternate)" 99lstwar "'99 The Last War" 005 "005" vsyard "10 Yard Fight (Vs. version 11/05/84)" vsyard2 "10 Yard Fight (Vs. version, set 2)" yard "10 Yard Fight" 1941j "1941 - Counter Attack (Japan)" 1941 "1941 - Counter Attack (World)" 1942 "1942 (set 1)" 1942a "1942 (set 2)" 1942b "1942 (set 3)" 1943j "1943 - The Battle of Midway (Japan)" 1943 "1943 - The Battle of Midway (US)" 1943kai "1943 Kai" openice "2 On 2 Open Ice Challenge (rev 1.21)" 2020bb "2020 Super Baseball (set 1)" 2020bbh "2020 Super Baseball (set 2)" 3countb "3 Count Bout / Fire Suplex" bowler "4 Player Bowling" 4dwarrio "4-D Warriors" 600 "600" 64streej "64th. Street - A Detective Story (Japan)" 64street "64th. Street - A Detective Story (World)" 720 "720 Degrees (set 1)" 720b "720 Degrees (set 2)" 800fath "800 Fathoms" apb "APB - All Points Bulletin (set 1)" apb2 "APB - All Points Bulletin (set 2)" aso "ASO - Armored Scrum Object" actfancj "Act-Fancer Cybernetick Hyper Weapon (Japan revision 1)" actfanc1 "Act-Fancer Cybernetick Hyper Weapon (World revision 1)" actfancr "Act-Fancer Cybernetick Hyper Weapon (World revision 2)" hatena "Adventure Quiz 2 Hatena Hatena no Dai-Bouken (Japan)" aerofgtb "Aero Fighters (Turbo Force hardware set 1)" aerofgtc "Aero Fighters (Turbo Force hardware set 2)" sonicwi2 "Aero Fighters 2 / Sonic Wings 2" sonicwi3 "Aero Fighters 3 / Sonic Wings 3" aerofgt "Aero Fighters" aeroboto "Aeroboto" aodk "Aggressors of Dark Kombat / Tsuukai GANGAN Koushinkyoku" koshien "Ah Eikou no Koshien (Japan)" airbustr "Air Buster (Japan)" airduel "Air Duel (Japan)" airwolf "Air Wolf" ajaxj "Ajax (Japan)" ajax "Ajax" hcastlej "Akuma-Jou Dracula (Japan)" alcon "Alcon" lwingsjp "Ales no Tsubasa (Japan)" alexkidd "Alex Kidd (set 1)" alexkida "Alex Kidd (set 2)" alibaba "Ali Baba and 40 Thieves" alieninv "Alien Invasion Part II" astorm2p "Alien Storm (2 Player)" astormbl "Alien Storm (bootleg)" astorm "Alien Storm" aliensyj "Alien Syndrome (Japan)" aliensyn "Alien Syndrome (set 1)" aliensya "Alien Syndrome (set 2)" aliensyb "Alien Syndrome (set 3)" aliensj "Aliens (Japan)" aliensu "Aliens (US)" aliens "Aliens (World set 1)" aliens2 "Aliens (World set 2)" aafbb "All American Football (rev B)" aafbd2p "All American Football (rev D, 2 Players)" aafb "All American Football (rev E)" alleymas "Alley Master" alpham2 "Alpha Mission II / ASO II - Last Guardian" alpine "Alpine Ski (set 1)" alpinea "Alpine Ski (set 2)" altbeast "Altered Beast (Version 1)" altbeas2 "Altered Beast (Version 2)" maze "Amazing Maze" ambush "Ambush" horshoes "American Horseshoes (US)" amidaro "Amidar (Olympia)" amidars "Amidar (Scramble hardware)" amidaru "Amidar (Stern)" amidar "Amidar" amigo "Amigo" androdun "Andro Dunos" anteater "Anteater" appoooh "Appoooh" arabiana "Arabian (Atari)" arabian "Arabian" arbalest "Arbalester" arcadecl "Arcade Classics (prototype)" archriv2 "Arch Rivals (rev 2.0)" archrivl "Arch Rivals (rev 4.0)" area88 "Area 88 (Japan)" argus "Argus" rygarj "Argus no Senshi (Japan)" arkarea "Ark Area" arkangc "Arkanoid (Game Corporation bootleg)" arknoidj "Arkanoid (Japan)" arkbl2 "Arkanoid (Japanese bootleg Set 2)" arkatayt "Arkanoid (Tayto bootleg, Japanese)" arknoidu "Arkanoid (US)" arkanoid "Arkanoid (World)" ark2jp "Arkanoid - Revenge of DOH (Japan)" ark2us "Arkanoid - Revenge of DOH (US)" arkanoi2 "Arkanoid - Revenge of DOH (World)" armwrest "Arm Wrestling" armedf "Armed Formation" armora "Armor Attack" armorcar "Armored Car (set 1)" armorca2 "Armored Car (set 2)" aof "Art of Fighting / Ryuuko no Ken" aof2 "Art of Fighting 2 / Ryuuko no Ken 2" aof3 "Art of Fighting 3 - The Path of the Warrior / Art of Fighting - Ryuuko no Ken Gaiden" ashura "Ashura Blaster (Japan)" ashurau "Ashura Blaster (US)" assaultj "Assault (Japan)" assaultp "Assault Plus (Japan)" assault "Assault" asteroib "Asteroids (bootleg on Lunar Lander hardware)" asteroi1 "Asteroids (rev 1)" asteroid "Asteroids (rev 2)" astdelu1 "Asteroids Deluxe (rev 1)" astdelux "Asteroids Deluxe (rev 2)" astrob1 "Astro Blaster (version 1)" astrob2 "Astro Blaster (version 2)" astrob "Astro Blaster (version 3)" astrof "Astro Fighter (set 1)" astrof2 "Astro Fighter (set 2)" astrof3 "Astro Fighter (set 3)" astinvad "Astro Invader" astyanax "Astyanax, The" abaseb "Atari Baseball (set 1)" abaseb2 "Atari Baseball (set 2)" atarifb4 "Atari Football (4 players)" atarifb1 "Atari Football (revision 1)" atarifb "Atari Football (revision 2)" soccer "Atari Soccer" ataxxj "Ataxx (Japan)" ataxx "Ataxx (set 1)" ataxxa "Ataxx (set 2)" athena "Athena" atomicp "Atomic Point" aurail "Aurail (set 1)" auraila "Aurail (set 2)" avalnche "Avalanche" avengers "Avengers (set 1)" avenger2 "Avengers (set 2)" avspirit "Avenging Spirit" aztarac "Aztarac" azurian "Azurian Attack" baddudes "Bad Dudes vs. Dragonninja (US)" badlands "Bad Lands" bagmans "Bagman (Stern set 1)" bagmans2 "Bagman (Stern set 2)" bagman "Bagman" bakatono "Bakatonosama Mahjong Manyuki" ballbomb "Balloon Bomber" baluba "Baluba-louk no Densetsu" bandido "Bandido" bankp "Bank Panic" baraduke "Baraduke" barrier "Barrier" bstars2 "Baseball Stars 2" bstars "Baseball Stars Professional" basebal2 "Baseball The Season II" bsktball "Basketball" batman "Batman" batsugun "Batsugun" batugnsp "Batsugun Special Ver." battlntj "Battlantis (Japan)" battlnts "Battlantis" bchopper "Battle Chopper" btlfield "Battle Field (Japan)" flipshot "Battle Flip Shot" battlane "Battle Lane Vol. 5 (set 1)" battlan2 "Battle Lane Vol. 5 (set 2)" battlan3 "Battle Lane Vol. 5 (set 3)" battlera "Battle Rangers (World)" bzone "Battle Zone (set 1)" bzone2 "Battle Zone (set 2)" atlantis "Battle of Atlantis (set 1)" atlants2 "Battle of Atlantis (set 2)" battroad "Battle-Road, The" bayrtbl1 "Bay Route (bootleg set 1)" bayrtbl2 "Bay Route (bootleg set 2)" bayroute "Bay Route (set 1)" bayrouta "Bay Route (set 2)" beastf "Beastie Feastie" blswhstl "Bells & Whistles" berabohm "Beraboh Man (Japan)" berlwall "Berlin Wall, The (set 1)" berlwalt "Berlin Wall, The (set 2)" bermudaj "Bermuda Triangle (Japan)" bermudaa "Bermuda Triangle (US early version)" bermudat "Bermuda Triangle (US)" berzerk "Berzerk (set 1)" berzerk1 "Berzerk (set 2)" bigkarnk "Big Karnak" bigprowr "Big Pro Wrestling!, The" bigstrik "Big Striker" billiard "Billiards, The" bioatack "Bio Attack" biomtoy "Biomechanical Toy (unprotected)" bionicc "Bionic Commando (US set 1)" bionicc2 "Bionic Commando (US set 2)" bking2 "Birdie King 2" blkdrgnb "Black Dragon (bootleg)" blkdrgon "Black Dragon" blkhole "Black Hole" bktigerb "Black Tiger (bootleg)" blktiger "Black Tiger" bwidow "Black Widow" bmaster "Blade Master (World)" bladstle "Blades of Steel (version E)" bladestl "Blades of Steel (version T)" blandia "Blandia [Prototype]" blastoff "Blast Off (Japan)" blasted "Blasted" blaster "Blaster" blstroi2 "Blasteroids (version 2)" blstroid "Blasteroids (version 4)" blsthead "Blasteroids (with heads)" blasto "Blasto" blazer "Blazer (Japan)" blazstar "Blazing Star" arkbloc2 "Block (Game Corporation bootleg)" blockj "Block Block (Japan)" block "Block Block (World)" blockbl "Block Block (bootleg)" blckgalb "Block Gal (bootleg)" blockgal "Block Gal" blockhl "Block Hole" blockout "Block Out (set 1)" blckout2 "Block Out (set 2)" blockade "Blockade" blocken "Blocken (Japan)" bloodbro "Blood Bros." bldwolf "Bloody Wolf (US)" blueprnj "Blue Print (Jaleco)" blueprnt "Blue Print (Midway)" blueshrk "Blue Shark" bjourney "Blue's Journey / Raguy" boblbobl "Bobble Bobble" bodyslam "Body Slam" bogeyman "Bogey Manor" bombbee "Bomb Bee" bombjack "Bomb Jack (set 1)" bombjac2 "Bomb Jack (set 2)" bjtwin "Bombjack Twin" bootcamp "Boot Camp" boothill "Boot Hill" boscomd "Bosconian (Midway, new version)" boscomdo "Bosconian (Midway, old version)" bosco "Bosconian (new version)" boscoo "Bosconian (old version)" boscoo2 "Bosconian (older version)" bottom9n "Bottom of the Ninth (version N)" bottom9 "Bottom of the Ninth (version T)" bouldash "Boulder Dash / Boulder Dash Part 2 (World)" bowlrama "Bowl-O-Rama" boxingb "Boxing Bugs" brain "Brain" brkthru "Break Thru (US)" breakrev "Breakers Revenge" breakers "Breakers" breywood "Breywood (Japan revision 2)" brix "Brix" brutforc "Brute Force" bublbobr "Bubble Bobble (US with mode select)" bubbobr1 "Bubble Bobble (US)" bublbobl "Bubble Bobble" bubblesr "Bubbles (Solid Red label)" bubbles "Bubbles" bnj "Bump 'n' Jump" btime "Burger Time (Data East set 1)" btime2 "Burger Time (Data East set 2)" btimem "Burger Time (Midway)" brubber "Burnin' Rubber" burningf "Burning Fight (set 1)" burningh "Burning Fight (set 2)" burnforc "Burning Force (Japan)" bbros "Buster Bros (US)" butasan "Butasan (Japan)" cabal "Cabal (US set 1)" cabal2 "Cabal (US set 2)" cabalbl "Cabal (bootleg)" cachat "Cachat (Japan)" dinoj "Cadillacs Kyouryuu-Shinseiki (Japan)" dino "Cadillacs and Dinosaurs (World)" calibr50 "Caliber 50" calipso "Calipso" cameltry "Camel Try (Japan)" cameltru "Camel Try (US)" canbprot "Canyon Bomber (prototype)" canyon "Canyon Bomber" cbasebal "Capcom Baseball (Japan)" capbowl "Capcom Bowling (set 1)" capbowl2 "Capcom Bowling (set 2)" cworld "Capcom World (Japan)" cworld2j "Capcom World 2 (Japan)" captcomj "Captain Commando (Japan)" captcomu "Captain Commando (US)" captcomm "Captain Commando (World)" csilver "Captain Silver (Japan)" caractn "Car Action" carnvckt "Carnival (cocktail)" carnival "Carnival (upright)" cawing "Carrier Air Wing (World)" cninjau "Caveman Ninja (US)" cninja0 "Caveman Ninja (World revision 0)" cninja "Caveman Ninja (World revision 3)" centipdb "Centipede (bootleg set 1)" centipb2 "Centipede (bootleg set 2)" centipd2 "Centipede (revision 2)" centiped "Centipede (revision 3)" cerberus "Cerberus" challeng "Challenger" champbbj "Champion Baseball (Japan)" champbb2 "Champion Baseball II" champbas "Champion Baseball" champwrj "Champion Wrestler (Japan)" champwru "Champion Wrestler (US)" champwr "Champion Wrestler (World)" csprint "Championship Sprint" changes "Changes" checkmaj "Checkman (Japan)" checkman "Checkman" checkmat "Checkmate" cheekyms "Cheeky Mouse" chelnovj "Chelnov - Atomic Runner (Japan)" chelnov "Chelnov - Atomic Runner (US)" cheyenne "Cheyenne (version 1.0)" marukodq "Chibi Marukochan Deluxe Quiz" cshift "Chicken Shift" chikij "Chiki Chiki Boys (Japan)" chiller "Chiller (version 3.0)" chimerab "Chimera Beast" chplftb "Choplifter (alternate)" chplftbl "Choplifter (bootleg)" chplft "Choplifter" chopper "Chopper I" chukatai "Chuka Taisen (Japan)" circuscc "Circus Charlie (Centuri)" circusce "Circus Charlie (Centuri, earlier)" circusc2 "Circus Charlie (no level select)" circusc "Circus Charlie" circus "Circus" cischeat "Cisco Heat" citycon "City Connection (set 1)" citycona "City Connection (set 2)" claypign "Clay Pigeon (version 2.0)" cloak "Cloak & Dagger" cloud9 "Cloud 9 (prototype)" clowns "Clowns" cobracmj "Cobra-Command (Japan)" cobracom "Cobra-Command (World revision 5)" colony7 "Colony 7 (set 1)" colony7a "Colony 7 (set 2)" combat "Combat (version 3.0)" combascj "Combat School (Japan trackball)" combascb "Combat School (bootleg)" combasc "Combat School (joystick)" combasct "Combat School (trackball)" ctribe "Combatribes, The (US)" ctribeb "Combatribes, The (bootleg)" commsega "Commando (Sega)" commandu "Commando (US)" commando "Commando (World)" comotion "Comotion" congo "Congo Bongo" contrajb "Contra (Japan bootleg)" contraj "Contra (Japan)" contrab "Contra (US bootleg)" contra "Contra (US)" cookrace "Cook Race" clbowl "Coors Light Bowling" cop01 "Cop 01 (set 1)" cop01a "Cop 01 (set 2)" copsnrob "Cops'n Robbers" cosmica2 "Cosmic Alien (older)" cosmica "Cosmic Alien" cavenger "Cosmic Avenger" cchasm "Cosmic Chasm (set 1)" cchasm1 "Cosmic Chasm (set 2)" cosmicg "Cosmic Guerilla" cosmicmo "Cosmic Monsters" cosmognj "Cosmo Gang the Video (Japan)" cosmogng "Cosmo Gang the Video (US)" cottong "Cotocoto Cottong" cracksht "Crackshot (version 2.0)" crash "Crash" crater "Crater Raider" crbaloon "Crazy Balloon (set 1)" crbalon2 "Crazy Balloon (set 2)" crazyblk "Crazy Blocks" cclimbrj "Crazy Climber (Japan)" cclimber "Crazy Climber (US)" ccboot "Crazy Climber (bootleg set 1)" ccboot2 "Crazy Climber (bootleg set 2)" cclimbr2 "Crazy Climber 2 (Japan)" crazycop "Crazy Cop (Japan)" ckongalc "Crazy Kong (Alca bootleg)" ckongjeu "Crazy Kong (Jeutel bootleg)" ckongo "Crazy Kong (Orca bootleg)" ckongs "Crazy Kong (Scramble hardware)" ckong "Crazy Kong (set 1)" ckonga "Crazy Kong (set 2)" crimecj "Crime City (Japan)" crimecu "Crime City (US)" crimec "Crime City (World)" crimfgtj "Crime Fighters (Japan 2 Players)" crimfght "Crime Fighters (US 4 players)" crimfgt2 "Crime Fighters (World 2 Players)" vendettj "Crime Fighters 2 (Japan)" crossbow "Crossbow (version 2.0)" crsword "Crossed Swords" cbusterj "Crude Buster (Japan)" cbusterw "Crude Buster (World FU version)" cbuster "Crude Buster (World FX version)" cruisin "Cruisin" crush3 "Crush Roller (Kural - bootleg?)" crush2 "Crush Roller (Kural Esco - bootleg?)" crush "Crush Roller (Kural Samno)" ccastles "Crystal Castles (set 1)" ccastle2 "Crystal Castles (set 2)" cubybop "Cuby Bop" cuebrick "Cuebrick" curvebal "Curve Ball" cutieq "Cutie Q" cybattlr "Cybattler" cyberlip "Cyber-Lip" cyberba2 "Cyberball (Version 2)" cyberbal "Cyberball (Version 4)" cyberb2p "Cyberball 2072 (2 player)" dcon "D-Con" ddayc "D-Day (Centuri)" dday "D-Day" ghoulsj "Dai Makai-Mura (Japan)" dairesya "Dai Ressya Goutou (Japan)" dkgensan "Daiku no Gensan (Japan)" dakkochn "DakkoChan Jansoh" dangar "Dangar - Ufo Robo (12/1/1986)" dangar2 "Dangar - Ufo Robo (9/26/1986)" dangarb "Dangar - Ufo Robo (bootleg)" dangerz "Danger Zone" dangseed "Dangerous Seed (Japan)" dfeveron "Dangun Feveron (Japan)" indyheat "Danny Sullivan's Indy Heat" darkadv "Dark Adventure" darkplnt "Dark Planet" darkseaj "Dark Seal (Japan)" darksea1 "Dark Seal (World revision 1)" darkseal "Dark Seal (World revision 3)" darwin "Darwin 4078 (Japan)" powj "Datsugoku - Prisoners of War (Japan)" 280zzzap "Datsun 280 Zzzap" deadconj "Dead Connection (Japan)" deadconx "Dead Connection (World)" deadeye "Dead Eye" defence "Defence Command" redufo "Defend the Terra Attack on the Red UFO (bootleg)" defendg "Defender (Green label)" defender "Defender (Red label)" defendw "Defender (White label)" defcmnd "Defense Command (set 1)" destderm "Demolition Derby (2-Player Mono Board Version)" destderb "Demolition Derby" demon "Demon" demonwld "Demon's World / Horror Story" depthch "Depthcharge" desertgu "Desert Gun" desterth "Destination Earth" detatwin "Detana!! Twin Bee (Japan)" devstor3 "Devastators (version V)" devstor2 "Devastators (version X)" devstors "Devastators (version Z)" devilfsg "Devil Fish (Galaxian hardware, bootleg?)" devilfsh "Devil Fish" devilw "Devil World" devzone "Devil Zone" diamond "Diamond Run" digdugat "Dig Dug (Atari)" digdug "Dig Dug (set 1)" digdugb

Signatures

  • Ryuk

    Ransomware distributed via existing botnets, often Trickbot or Emotet.

  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.sadfawerqwerasdfas.sonicwi3
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4378
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/Android/com.sadfawerqwerasdfas.sonicwi3/aybydcaamcvhtgn.dat.jar --output-vdex-fd=48 --oat-fd=49 --oat-location=/storage/emulated/0/Android/com.sadfawerqwerasdfas.sonicwi3/oat/x86/aybydcaamcvhtgn.dat.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4717
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/Android/com.sadfawerqwerasdfas.sonicwi3/whdbgnw.dat.jar --output-vdex-fd=49 --oat-fd=54 --oat-location=/storage/emulated/0/Android/com.sadfawerqwerasdfas.sonicwi3/oat/x86/whdbgnw.dat.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4889

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/cpdownloads

    Filesize

    20KB

    MD5

    3aa09502e0c40fed72db904df67a59bc

    SHA1

    7df400192a513741a792ecdc052f43c36cc04201

    SHA256

    ea81884cf31e53d8e9139c70076b740e99610695003465720109c0ea79f3eb2a

    SHA512

    d9b017d44f1ad25d771ce5106cd22373a9214c34db771e491a36617805681146e0b168757823cf466fa3a9384f64450da91d4dd0b3f2874cf8fa737331ffb269

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/cpdownloads-journal

    Filesize

    524B

    MD5

    b77ef67e1ce238afe65d2e9d80751913

    SHA1

    f753c39b2ee6fb0511702725e3ae4df0d65efa7a

    SHA256

    3aeb54d08bfe3073ab90bc51fff301bd3c23a806654def2c4337e03303256bb0

    SHA512

    32d4670e5e1cef5e59773e5cdc3d8764531844f1c5dc1e3bdfc6ac4e37cf8d47c22fa227948b1e4ef743e11cacdeddd1df89930aac5e12a3c92f19b43e05b03c

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/cpdownloads-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/cpdownloads-wal

    Filesize

    28KB

    MD5

    454ee43a71a4ede14177ab9b177faadd

    SHA1

    8548b00734cc27e735f7409d422fdb6ccb91f4ce

    SHA256

    2949400281c01c8d7d19024c885118ef93b44069275544314984ae5d0d23e091

    SHA512

    022815acf7a078fef85b8f69759990b153ba6879bc2e2860155c27afca41fc17dc68cedfca229a7666d0f412ffac1e1f31d278d0aac0de880b4a331ac2e8d07d

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/sldownloads

    Filesize

    20KB

    MD5

    0967250d85fc37f44b72eac5a8959719

    SHA1

    64c24e534e32f585a11e76bbdb77982473106b53

    SHA256

    2bdbe05704a015fbe2a8f107f4e37836f439b685aa68693dcdf3fa0401d1d516

    SHA512

    9cc819d9ab49918904479526b661fd95355193a71f9d4692ac2d46e393dee22dfc552aaccb569eae76d11d96c24dbf069d7a4f93ff4ead04547612a4782d0749

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/sldownloads-journal

    Filesize

    524B

    MD5

    27f121f52a8c2bcaad830b72f9b5c922

    SHA1

    1366c3d6e6687d0eac90b1ba1261c0757c92441f

    SHA256

    cfbfe70e5b100493b6a82238f648d3e3e08344aec9576d668f5a24b64131d157

    SHA512

    eecdc0c8552c22c802fc3171fc13a82f0f2ada67da4d61851664dc9fd19c42b9955b734f310e0b19f1359e294c11015039f4e34ee371b85db656064402b3bc2f

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/sldownloads-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/sldownloads-wal

    Filesize

    28KB

    MD5

    c9238c6e0be278f95696298be133b101

    SHA1

    08579aa69ba8b8abe8645be4beb2a9f6106b09b8

    SHA256

    6c8a3a692520049cf78186da4d17909f0ceb4aff6f7c51723818d26a62e32fc1

    SHA512

    a01b195097e90a18f66feb0c34708d9e9d19c5312563ff9d52571dfa7d00c7b9e2fd694fe2467c1a7d0122cb253e55e00eb947c67d1852d38f34ee2355fb3ed1

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/vdownloads

    Filesize

    20KB

    MD5

    a1c9d4996eb44715cbe6b651350c0728

    SHA1

    88927066d02c725a366bd901df087a1c777a112c

    SHA256

    43bf5b541bfd8a09dee698d365956f2f7800a018e33a64b6f9de262aae2f0e1d

    SHA512

    5a09d54d1927566620e00069531f67a9f5452e59780ebe637e10180ce1dea5edd630f15a14a13bd4ca490601c987f504b50643201e3f96c4f47b2080835192a8

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/vdownloads-journal

    Filesize

    524B

    MD5

    ef36c1b4a76dcf6e8da94379ec7b7585

    SHA1

    6bf9aef8b7197e1e09a0de1bb5614e589f36ef3f

    SHA256

    2460625e9e42a7c3b2a35b546951b012415828d558c9661763a9bd53b71098e9

    SHA512

    7377e92d4f8197c61a0df909512b8ca8472370d50cfcb2f4fbbb258e77a451c83a8da769a537e7210288bc48372246b6f9cfad8dee668cca9be0f90e8a1cd6e1

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/vdownloads-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sadfawerqwerasdfas.sonicwi3/databases/vdownloads-wal

    Filesize

    28KB

    MD5

    372e9963a065da859d5cda413118ccca

    SHA1

    5f7187ea8b0dae229f4d9284e6ba970fd119c1ff

    SHA256

    3c344fef1aec5c97204a25d35b99ea7741cf8de82841aef1ec010c197a1f1d1f

    SHA512

    3d317fa24d90e29e3b30f6fd40078f71e66f2a5ffe4b26977971aa599929cf2a07bcf86a8e357b606b36873b5919355a0e4268e4e504f89ba6788c4c034dd991

  • /storage/emulated/0/Android/com.sadfawerqwerasdfas.sonicwi3/aybydcaamcvhtgn.dat.jar

    Filesize

    83KB

    MD5

    b2dbaa59700e847f1f09e9ee3e697280

    SHA1

    65d35a8889e162e0d93249501d6ece0bdeab75bd

    SHA256

    28d30aa230a74582b2f9ff3d28dd93a6560cec5e98c28977a7a272668009e963

    SHA512

    cd98522a884af5568427be4600dfa90dbba2519b030bce93ae3413133ac97df5c9779055a50f753be79956390d9404b32f4eaabd74e0f9728fd44f67f985e472

  • /storage/emulated/0/Android/com.sadfawerqwerasdfas.sonicwi3/aybydcaamcvhtgn.dat.jar

    Filesize

    173KB

    MD5

    95ee813690dd01a75106d988b87c0253

    SHA1

    26ebfbcb5bfdc75a1f202ffd68ce106d7f792ded

    SHA256

    c50eba8a97c93315d888f2414b1a291a7b2dd97b549097e3d9d7ee2a3909691c

    SHA512

    de5ecb3b6f393a4064ca6853ed59b63e40d54232bf5b62c96293cb5dc944373bdbb773250915db67a28e6de7ac47f3654c5e794403d2308fe4c205ce4a6687db

  • /storage/emulated/0/Android/com.sadfawerqwerasdfas.sonicwi3/aybydcaamcvhtgn.dat.jar

    Filesize

    173KB

    MD5

    de202ef37258c62fe80f234ba3e39bdb

    SHA1

    4450c81fd144d0c83c40c1c0d106212160b7cbfd

    SHA256

    5edfb061613c69e00c02741523b12e1ca40bff92f9aa31a073cd81013d92f8af

    SHA512

    3849e2674a4ddd189b4ca00c38144cbe5ce3769b5fdd3ef000ca4cb3122c1f99425d4216257a4b4bb36f8500ec6f6e67ac5829efb15b4b266b370b8e467388e6

  • /storage/emulated/0/Android/com.sadfawerqwerasdfas.sonicwi3/whdbgnw.dat.jar

    Filesize

    88KB

    MD5

    f03109f7d3b909d09d88619e1dba62b8

    SHA1

    82369183044ee28ada441be5b706cb5fb776f11f

    SHA256

    7e63c4fb649e966eb8ed50ef223855c361dc15a14e0298bd541f25523932ad51

    SHA512

    dcf80a5b89c5c65968c75cf51c44d32155b272bc45a0eee371a3554fcd5084b068150211e334da388e8f5827ff60c79706e54ff1d640eb82cc1b11081109b965

  • /storage/emulated/0/Android/com.sadfawerqwerasdfas.sonicwi3/whdbgnw.dat.jar

    Filesize

    188KB

    MD5

    6ac13e470c763f47aa0332b146545ddc

    SHA1

    b307d7fb98377afc0b13f8be32e1712ca7097dff

    SHA256

    ff5e71ce4f28ad30f21ce057901e5c2ee1cd39921523beef2358f438798483f7

    SHA512

    ef4889348fe20d9b43f2a5db114e9b6a7d2cad3d831c8a8f6924a0d607fd8cd3bb726d005e73fa46d7a59264dfa5a395e05fa970321ceb787d3e0e45086daf42

  • /storage/emulated/0/Android/com.sadfawerqwerasdfas.sonicwi3/whdbgnw.dat.jar

    Filesize

    188KB

    MD5

    eb51c914ecbb3efdf23011cfa9d932f5

    SHA1

    1a6058521ec1233b3ccbc3301db119e1a0c622e9

    SHA256

    c6bfa7d9ed47bbc7ab6d6677f13ba9ebfaa2f883c21ebea302319e143b6d62ca

    SHA512

    f54a858ec00294cc28551f6f367da905b1a6310d78dc65e63b4dc3d079a11cac6ffab8e07e0fc9f64f82c458ce9f37ad2cac835caf295da5ee384cbed7eccc46

  • /storage/emulated/0/Android/data/code/.vapp.dat

    Filesize

    916B

    MD5

    8a74c9f2ee1cbf8bc6a28fe2d214178e

    SHA1

    023edf8d43dc896024d89529196733be0285720a

    SHA256

    e64216294cc49ca8e1026a1fa2e9ea5e7291bfd184b414c85c193f7b817a8284

    SHA512

    c66ca5623ac66c3b95868bfd429ecccd6655f14adb2d1031baba33bf640b5782c3c39c6639e7bd547f60b9c9cdd1917abaff311210cd4d50e020969721024653

  • /storage/emulated/0/download/vgp/clearT.dat

    Filesize

    51B

    MD5

    a182c199bf0bca696836d704466b0b8f

    SHA1

    a955a3d81a9fbfb3e064d28ecd3433ecdda2f542

    SHA256

    aeba33d1178a92f5db984268e2f29aba8ddf4fb1c652e60b71c4d0577d7093bf

    SHA512

    e265cf0bde14b966370eda87b109c5bc8732a792acb130443e37f0f32e6520d4052f88199549ef90eaaf83ddd13a66e55f66bb8beda9e905b705f2db7c3b07d3

  • /storage/emulated/0/zymame/artwork/dir.txt

    Filesize

    26B

    MD5

    61ca60176c21d1c954101c9ae58a42e3

    SHA1

    6ba33a9f273dbb6470c9970e3dfe20efaa02349d

    SHA256

    c9adf2f60c080d3f7d7946b09eead268bc6d9ff0206ee722ff775288eef8dbe1

    SHA512

    4dd28253f99379111239a315c152ca719a012aede72171807757b1f96cad975bc694c8f06ebc7f05ff2f3f2b0284499351ea0f8ef095452ec3caebbba68c55d0

  • /storage/emulated/0/zymame/cfg/cfg.txt

    Filesize

    8B

    MD5

    906138b640242f8e002752e5403793ab

    SHA1

    3bad2e1cde7ea9b0b1745e54551b9170a0728a8c

    SHA256

    aedf75ef5955cac12c0f11c0db5dcb6e0272db9b43de123e7ee3b433be2167c4

    SHA512

    0ba58c4ea92ceb4649d23ce53b0de6891bdc02d668f21d59633a1c1df9140705e9ef8c150164d245b746242c97513cca1b8e4e4091eadb55570e82556ba32b60

  • /storage/emulated/0/zymame/cheat.dat

    Filesize

    1.5MB

    MD5

    c5b456237958c7a7c120a8ad710786a0

    SHA1

    c0f20911b6f929ecd8302863d9ced3e5ba9c6b97

    SHA256

    6a8ac178d339a303d78e30191bb06b5f2471e387f0fd5a70d78abac650cf6439

    SHA512

    b1a02e051b8e39ff4be46ecc7818e0ea7f6defc9868dd3eb2e6d73df1a8f825dfddbf0395cbf1f9cf021aa4f53e1dc25c846d8733a65ed4340dd6e849483ba97

  • /storage/emulated/0/zymame/clrmame.dat

    Filesize

    1.2MB

    MD5

    1fdd561c16e39b659ef3f90d6ed8bd83

    SHA1

    c87b9c9b1c715c8a6924b31f32de941652b238b0

    SHA256

    f07a40b7ae503dfc48bbf89d9dcf59e5eb1d8afa31e803814a1f8a56c35a0e33

    SHA512

    bd5b7b7c5d3a70c3456636e1aceff85f0e5b060179b06b03e1fdbdec38eac33690a29cfbdce3c1049119c217f40f5340e6da59b26f1019ad1592785e529e4963

  • /storage/emulated/0/zymame/frontend/dir.txt

    Filesize

    55B

    MD5

    0ac0196a072bfb4837268c532082fbb6

    SHA1

    5f8f21f5f4a1bb31b4d08c83bfb6075e191dfd57

    SHA256

    327b0a3bcab302ad351dd22293e1e788eff199cf655fc2d8dcd3aa0136d15ccd

    SHA512

    878635bba7220cfe04a39a4bce58848593e506dda6e6f493db6cd3627a557dfdd526aa9328930728c1261ce136d93f7566b112b0a26d42968ef3cf76d20cb25c

  • /storage/emulated/0/zymame/gamelist.txt

    Filesize

    75KB

    MD5

    8d258144aa9a9f6e2499ec4c8c0659ed

    SHA1

    4e5fc5844df4df8366886b21175003ea036f3129

    SHA256

    53fe2508a210b4a27c1a742a774865640440d08937b6a64b64dce2dc1aff8c56

    SHA512

    28ea5bb66347460a9ed4e15088b6f8a18bf290c1a738271ccc2e302f0e2efa17bd10dd1118ecc82fc38fd61bc44c54c63d2ffe81cc02e07223fe72a2e9637897

  • /storage/emulated/0/zymame/hi/hi.txt

    Filesize

    7B

    MD5

    0b4390cde42299bdffa7a66153064449

    SHA1

    593f2c5dea5f2412fa902b091fd40779484a6750

    SHA256

    6fa5ebe3102005d58d6604441be185fe9c81145fbeecd7c5e0af0d960d19b6c7

    SHA512

    d9bceb4256b50a263d78d58ed1012d32f7fb54df15dbbd729074f0cfb927327bd904e360a8ad6cf6fdba4f80ec1bcf66ec5707b8d6b34de5f95a3d9071942a41

  • /storage/emulated/0/zymame/hiscore.dat

    Filesize

    49KB

    MD5

    5567b18ff76cf4406c915d9d5deac2f4

    SHA1

    830660c510bb185c3278320b2ccbf5f536a1a649

    SHA256

    5343afa128b3549ecde25fa6039d6d0f29863de89bafde18871c6111fcecde78

    SHA512

    8292d2376f1e7d0053ae952b7a3004b86f493db78ac8a6ec6a81994b7cdb7af89240b03fd31c8c70fd3318be276a844a84b87a528259f33d29b5c87a63ce28cf

  • /storage/emulated/0/zymame/inp/dir.txt

    Filesize

    37B

    MD5

    50ce09c21997c968d390df50d431cf35

    SHA1

    4f720e2e6454ebab51d58fb7e4514bf1ec8e2eab

    SHA256

    2d90bb79562ee8e9bd6a5265f079519804b62f1faec82af80d19ba38e491dfd0

    SHA512

    83141dc97486c797366a4ce05c888434df80aa0b1bc0d7636b0fbff737cb8d02fe8f3ba21ef73bba977b4a2a944861a8f7af03ec7f84d9f5339e057b8ccfcbd7

  • /storage/emulated/0/zymame/memcard/dir.txt

    Filesize

    39B

    MD5

    315dd1d2bef0d915a1ba98969d0add35

    SHA1

    b3ec51f81a86dd5b11973dd5c9db5f9d25471df1

    SHA256

    61af626687b67a8bf45e236785f8e64a6be90a52fc77f9c50de3ba7d29427ac2

    SHA512

    70a27570be6409d942a7933daf2ba7127c537599d78adb8535dd79a2e608bf4a798b8ded9893098ea061d7672ff1e06a6618e2ef2fa9fc3b965745dbf312985c

  • /storage/emulated/0/zymame/nvram/ddonpach.nv

    Filesize

    128B

    MD5

    60a5cc61552e53b80d010079253e5e49

    SHA1

    7f597107d1610fc286413e0e93c794c80c0c554f

    SHA256

    deca89913dc67e9ff159d29c9bbc6e41313d260b266d40d82343967e96cb8dcd

    SHA512

    162c17dbfb3c5c206c2a5ffe5ce19bb0519003944df8d81e2b7ef5015c07b0f607343e0cf968b9db68f18233ad19413c5f2bace5a1605f68e6fbba3403317a56

  • /storage/emulated/0/zymame/nvram/dfeveron.nv

    Filesize

    128B

    MD5

    aaacc5d7f3b1d8744d0157a293120d13

    SHA1

    ac7737ad0bea039b3f7f5e4b552b248c26c7700e

    SHA256

    1d086bd3b7209b72bac0d1a85ccd09d19075840dcc2af27a6cf71382a73b7c31

    SHA512

    b30ca67a570224f5ea926b61d1b8a3fcb6cf5e340a3be4cb56bffeafdaf0827d3053d18c6dd83c7474f997a4638932288150c78fecbfeb59b91663ff927cc647

  • /storage/emulated/0/zymame/nvram/dir.txt

    Filesize

    33B

    MD5

    edc7b1035a157da632e12f95276f3c5e

    SHA1

    9d56be8ab0b219a4c9a9b86615dbc8bc3d30ecb9

    SHA256

    d95ab3a9c76c87af69c90d6212955d38b4e11f419df093c2b3dec4a2e685d34b

    SHA512

    219b36eca02f1e7d24dda88517278b8a409845475029c56dd01593e4ba9876547bbfde0b2f01174df4987fda43a0774921f7edc5f06c8e52105afda10bdaa694

  • /storage/emulated/0/zymame/roms/dir.txt

    Filesize

    28B

    MD5

    5c5471a17bff533c549a6c083c0cacb0

    SHA1

    ee75224a9890b07c0165849d44105fd4faecb255

    SHA256

    9bad542be120661083668e03612d8cdedab77ca8c8d70dfbda4db4e9131e9a39

    SHA512

    18b0a626dca0b260c8a469b8732e1140b3612ef573662e8bb60ce314100cffa43d20585eca9742ca349c45d3e53d9f60f9ffec7a2ada3f4541eaba21767e3bdc

  • /storage/emulated/0/zymame/roms/neogeo.zip

    Filesize

    55KB

    MD5

    503c6b3d40a5b31edc884d0532f71951

    SHA1

    6af9979f114aa186463cc089e1a817de0d1470c4

    SHA256

    186f799467ba4a1970430a3135709c66ae7e921abdd450bca68083cb1a2e44f9

    SHA512

    6b352bca057ec6d5414516206e5e8a8f20fdcfb430736f9bfd82de7cff07f1adff8eb05d1af827d8cfda399058a1343e366337068255a0b3e71f08b1959706cf

  • /storage/emulated/0/zymame/roms/sonicwi3.zip

    Filesize

    8.9MB

    MD5

    4e07bd94a4539faf5aa8c227fdc3aa86

    SHA1

    17dbf73bb6ce2ca895e9e56d990a7ff2c4694d5b

    SHA256

    05115e774e87ef52fe681af8cad0947a2a39a6a16615d06f6bbb4a415e75e401

    SHA512

    eebd0f5c74d1dfc3411e590b140eed2c64b59362ae5d6b21219c57a539fe7a2ccb02a8e423761efb3d6dcc9fe2d40be1c62404b590449f2d0e7bc3731a898709

  • /storage/emulated/0/zymame/samples/dir.txt

    Filesize

    32B

    MD5

    9e444957c7e7f6bbb69a527f2fecbf2d

    SHA1

    4a2dae3cc8079626692716e377f2d99247ed0a81

    SHA256

    058dac2d76ea0a37dadd7374e3b9cdf4e2d64870125d12220ced0f388d3a4107

    SHA512

    1939a26596f1eab0186bef168a118283828ad8b33d4e90d6a29be8504e36ba70d98965de02067a165860c00b9e33cc8b3e05afb22475ba2004a99b583f76541d

  • /storage/emulated/0/zymame/skins/dir.txt

    Filesize

    18B

    MD5

    763795df731edff9329cedee0545ac56

    SHA1

    d22c6587ed205a7627c3e680a53533bb0d7dbf34

    SHA256

    8e8abda2a28ffd197e89c725b898fd4708139609b5d08283b17bb01509b2df16

    SHA512

    7e36450d1198342d7f66b4148fa71d6880fd820838e5a4ae7f1dc9bf8adff701d22ebbc0bded3931f3fbe0f01573540b4cfb69adf3fa4bcd538f1ce6da5b230c

  • /storage/emulated/0/zymame/skins/menu.bmp

    Filesize

    76KB

    MD5

    04bad9d8e44ca10346f49218dd90e844

    SHA1

    4c32cc4cec7b7eb3f2230fb9d194fdb08c3c0399

    SHA256

    a3549a84242c5633e8e88eb41cf69b037a1e6c66607dee32aa4d9480d01520e9

    SHA512

    dd270a98964b96714c314ac968943ee7c3e0889a99e4e2c8b2cfc9525ebd0c5a4e2512b85cb1a3cc01c2e730a9363db7e05c64f2d7be4b6f945110ff840cfa5f

  • /storage/emulated/0/zymame/skins/splash.bmp

    Filesize

    76KB

    MD5

    62595501c786a5fd4157e8ab67be526f

    SHA1

    d5c09a55963840979a68bbec1494c37cd46227fb

    SHA256

    12071da10d545011f50f83c96df4957eea35dfe92d6123a4f857025f9e17bad5

    SHA512

    e0339d779fb7921f2d59383c8a999c319087656156f8cb29e617763f9a337b05d87ea58c44586b2eb8396a1a279bed211954cdcf31abffd173162903ac66ee74

  • /storage/emulated/0/zymame/snap/dir.txt

    Filesize

    38B

    MD5

    f52c4b459c656718ab1b470b5fa3cd9d

    SHA1

    71342402d1d82e18d9377797616b2a5d2a4f2d54

    SHA256

    1fbdea760e022cccc6b18e658eb02957b53685b8b21a9808a0032a7bfb960b7e

    SHA512

    fd21d9c4ba9b1f8cec57490ac5aa26813e85f1062a6095f01eca259068af2b119c0e1184a9c99f9a60e57f11ee5abd37c77d0179470784db01452b9aa6aafbde