Malware Analysis Report

2024-09-09 16:12

Sample ID 240428-26tgksbe54
Target Application.apk
SHA256 7e4143dd27644a0aedc66130c2a0a56e7aa556e75135f2c6a40c1106228e3fad
Tags
discovery irata persistence
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

7e4143dd27644a0aedc66130c2a0a56e7aa556e75135f2c6a40c1106228e3fad

Threat Level: Known bad

The file Application.apk was found to be: Known bad.

Malicious Activity Summary

discovery irata persistence

Irata family

Irata payload

Registers a broadcast receiver at runtime (usually for listening for system events)

Reads information about phone network operator.

Requests dangerous framework permissions

Acquires the wake lock

Checks if the internet connection is available

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-04-28 23:12

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral3

Detonation Overview

Submitted

2024-04-28 23:12

Reported

2024-04-28 23:14

Platform

android-x64-arm64-20240221-en

Max time kernel

4s

Max time network

142s

Command Line

kisi.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Reads information about phone network operator.

discovery

Processes

kisi.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.10:443 udp
GB 142.250.200.14:443 udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 216.58.201.110:443 android.apis.google.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 14.180.250.142.in-addr.arpa udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 216.58.204.72:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 vahidtried.nitrocp.site udp
GB 216.58.201.110:443 android.apis.google.com tcp
GB 142.250.200.4:443 tcp
GB 142.250.200.4:443 tcp

Files

/data/data/kisi.com/files/PersistedInstallation2603870935387110028tmp

MD5 20647832878cbc887c8e14578283ceb8
SHA1 e3c286ca9ba5513979d25940a282447ca115c013
SHA256 ea7c36e4a57ca3877307ffb7bb21a85e57a073992d16e1e537c7026b32c50868
SHA512 93779b6788a01261ca303ce2d53ee343405610ddf4b1ea8f2704a0b69ce30697a6b13f809ab92ea74ce43191ebbc3ec7d0ebc1eb76aae66d4df1e01947e907d2

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 8be2a2df0d869529ae81a6248876c5ed
SHA1 119f8f03697e0605d70c3e8433f439fb975eb473
SHA256 a5f89ce3369319dec3feb2cd568a9785bdff9d37498e0637c6fa570a6fb62bac
SHA512 de695dab88fad9ab555f75694d6e7cfbcc47b0c54f19c0b809504bf54f4c511fa15c88aa03c158d74df18adc9cd9ebfa36bfcd6fd251d6696926b0eab34babcd

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 382b0e78044b1f35d84607a592cf62a4
SHA1 24f410eb6ecd15de9147bb6c6f59fbfdcf8d4160
SHA256 148dbb8b388ee2e3016e7f03629cd938cd987c7c642a8c1ae459bd424b4f1c18
SHA512 4c240d30e0698a849109cf7178e11f38ec0f53a442cc91a04daeae6fd9e7a5a936532906dcb9185fb74ba04aab505df9b3bb9ce43d82e45e4f3039acb460ec80

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 0eb4eef647f124239c964602893964da
SHA1 a4ad5c417b42cdf38cd7df2eaaa4f84a7ee57160
SHA256 8a56422cbce3584761b8d14f7c83855d8015ec1f51ecebd185055379b351a9f0
SHA512 97d27c11e38c520457aba25879e5e348ae51d75cfb522baa823e53a99235d7a26653f70fb6dff3159bdef31aef4ebc8a45abe9946eb4ca4f62f8d1433cfb59ab

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 cb7686f884c5b405660fa2eb8fa0a346
SHA1 43d1fa025423998079f8c8b713274f3caeb8125c
SHA256 132c90617ed2409fa337b17f18f2698bfd9360bcb1afdbba0859b4b4eee04d04
SHA512 ec2fd4be45d86b64af02cbec0c802bf7ccd0c72966c266d2f80058b26404db946ae5a264f3bdacad2994758436137026648654d832d1e952369b729a6436e2e3

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 4429dd179d83b128acdf5623efba3cf3
SHA1 3fbe793de8e5a0dee7aff7207088e03f335f4dbb
SHA256 083a2ed1eccd2d2f333b5d69eaa7123305752c16188706091e5b76091ac8ecc9
SHA512 5396647b7afa1a3c8e0d6fd82f28688c0125863bdec4ff79d77d69b83de51779763a9b04de80cf3ddae25edbb226cc70eabb9018169717e6b78606faf79e8f9a

/data/data/kisi.com/files/PersistedInstallation93376084182381177tmp

MD5 8f4b0900b49a524f9524edb6968b7e94
SHA1 da1d457d46855690f5a7588c3012d7719f0a9b96
SHA256 8f67ff37fbdd11de34e655f539cfd68843303ca99873675c030da212e7531168
SHA512 83dafc7033cf730abbe438a151cda8a7b2334e0909b7ab58a5c3b2885a261bd438a336cf9e2e95aaf9c3ac3be11f207f6ec0bbea685e399c9db739d673a5f311

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 62a8e3d13832e4ed12e00cc211817ca7
SHA1 a32f36622ec2ac8064dc1dd3b6f8d735aec185be
SHA256 b6c913c17509b6705ef62678aa58c33067ef6580a06997ea52c4df3fb3565f90
SHA512 081e31afba731e64b9b370d5d97e77357e155818c09133552df53497c9d70199450995214321a62574c183b33078456ba4d9ca654cca2360bd40439bf54ca0c6

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 3206ced3b47684dc8c9d7ef2f25d5946
SHA1 0b2b7767e0f5da8bc49d4ee902d937aae24b23b1
SHA256 fde8174c58478347afcf7eeddf30b8d1974133c9f19c232aab99ff6cf01d4091
SHA512 2ce24322887b9d38706659c558e11eb32f185dee6a33b9a8c204a068cd5d99b6412074d458bb9e40ab7aff6510c593abc2700b54317eeb225eca5a634acf68aa

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 e1910dd5e700559838ef35c2031af7bd
SHA1 bcbf643d6f0d8fca6b0f0c1f3c3f4af000aa2a04
SHA256 dd853e367e81187397cb15a33b67cbb78bab8d0169bb27be1865ea4bbf150400
SHA512 5d8d7d0b984e92980bc0695283adeb694acb2afea46845542d95618e68bbd87a0339ae8096e8fa75a7c7420127938e677dc446da00d92cb04cc8dfe35dd4cfc3

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 c09371ef3e5b5adcbd141676fcd1a958
SHA1 ac915b8d9fbfdb7950cf291bf4f424e7d948cce1
SHA256 d0c393a85129c7a78864f73b96553ac5c241e368ce4d90435dad4537b9e4f084
SHA512 7d3c5818604eca97cb4f88cc9f2962793e33233467309a4ef5e75142017f721eae4169cb4f8296fddc5dfae48f7dc26d7cec4e484f0fbf05f81ceb4546970677

/data/data/kisi.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 e0edd76ed7ba317b8949ca797bdaea3a
SHA1 0227f594b37346ad2ffca82da18d7cba217498c7
SHA256 b5fa29970997b6b814e5e20fc7bac795f9b07b9d1e240ddf2d3287b1d639b4ae
SHA512 6ae8c515cee9553978d86366c9d90a9c90cd72a5e7d9c4f010cfa1b9ef4cb83d0bf9750b97009f97a0d6c370232612d31a68827831cd2e4efe86ae4cc42a6d76

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-28 23:12

Reported

2024-04-28 23:14

Platform

android-x86-arm-20240221-en

Max time kernel

123s

Max time network

137s

Command Line

kisi.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

kisi.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
GB 216.58.201.106:443 semanticlocation-pa.googleapis.com tcp
GB 142.250.200.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.206:443 android.apis.google.com tcp

Files

/data/data/kisi.com/files/PersistedInstallation393734938232858109tmp

MD5 0f345836ef1fa5419ed71fc71189acf1
SHA1 81524295800689defaad4c8fcac0258e8d93f266
SHA256 ab3b3f29c2917f9843f40bfb55e1f154f6c10b250d919f9730aa8491fbdc4306
SHA512 23c8c7e00b12a263b356f227838e30f886775774c1517f19e384f97c40ca144e4d557fb0f31decea7ee97bab91e1ea187c8c5d457a866f779fdaddf1fc64b68f

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 ad21bc16fba1bcd66e7161063ade38f2
SHA1 18b0a51ab542b98eedc7c5dd78f32c5c1877e77a
SHA256 2e26b0416c9b0d86caa2a464ac083535b0ee5d080b2d673947f9e4583308f6c5
SHA512 439ba526a0efd5f7d699e131cd15003cdaa8b913b23770a97e46ef361905964cc8f9aea4ad4f284a71d340dbbf9d0eb1d623067b45d8bc863cada2bd60637bc2

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/kisi.com/databases/google_app_measurement_local.db-shm

MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

/data/data/kisi.com/databases/google_app_measurement_local.db-wal

MD5 43becd7732e6e7490216f9fed352085e
SHA1 e55d53e0c7aa9640edfa6ac1eb2fd40d24e77dca
SHA256 5ff25769a1f83b30367e901bb899d69776bc9a81f332519a18e172b25ecbc6fd
SHA512 e939f6cfe1747734ad9d54bf4d57b833af4d1746617ef580f5c2230b2a191b284724aa5ada3ba05d9b18b34b4848955540bd1aee35be717a63ef7823b9bba4f4

/data/data/kisi.com/files/PersistedInstallation8142452326209765872tmp

MD5 986c8ab9ad8050e684eb8d12432fa482
SHA1 6633d86506a69e9a8f383bb9b8d14a59249aba95
SHA256 4a4b3b3a4eff79193384774aff3432f9395ecf658e492d1c9aed821120d1d1c4
SHA512 a0f3e08ae794b46ea949cebbe7f0495af2133ac6cdd3d420fe1a605860097c13a115f82d60dece9c8200e0c89076fcafb3cd03575f1553d0e563a869d7a45591

/data/data/kisi.com/databases/google_app_measurement_local.db-wal

MD5 39ebde90cd108ac35f4280ef5164a1d8
SHA1 b505b71d68457cc10062904f335b90926312925f
SHA256 c308eeee15041b36cc8dd6376f8e0772862d3d257951e29f91c2a3a1d383475e
SHA512 82a42ab02d9d177fd6510154f6b34482cfc3b39c9811cb822f5c8a40e0bc1f91d36673a136338c5c44f25e05ea985018d9b53fe100747a77e06be85d7d9a7e62

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 a184166ba37b8eef285895cf0e1fc449
SHA1 43c36d01c98da5677228a07f846364003274022c
SHA256 cd680d216e05fb9cb60dca8b5010846a5978384e19673fd579e8ecf1fe4b8a48
SHA512 726872a31af31b690d77d7f7886cc9179fa81bfc09d15426513c5d137a1355712619ade8dea4ce3e9981293a956df47a4eb9436f79ddd86c339a55fe339c453d

/data/data/kisi.com/databases/google_app_measurement_local.db-wal

MD5 968b7e6f9e3cbaf113a06392e2d23ed5
SHA1 fd5da6268c21132167a72d7e0a79f5d35d581089
SHA256 a561cc159f22c9e80521aef818b2e5b0c94f24522c388263ec37a6d4563677be
SHA512 3405009e55e48c93e6a2651f1782dc242c3c76bef9c5237233fb80d58bdc4d9d5a971baccf6bb52fdda7565d7b1d72f6da3ca2def4449e6b851f390896f04524

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 ee0d63b1290e1994b4bcbe1d6a126da3
SHA1 afa7228b9397db771aef9d73ce55e702c9e41a17
SHA256 b14c39f3da444add62c1b2d8df0ba5493a5610dc99a937b5b4c17bc0a5045289
SHA512 545d8972feb3d393bce79fbc87634d9a3ff3b37b33ba1c3f35eaad90c358c8077db8ffd17cf5985c93979f44f9d40b33f80adbe08e9f93ebd0999f7e4c7ef21b

/data/data/kisi.com/databases/google_app_measurement_local.db-wal

MD5 b1fa1d20cb653b033e10c65f70ef50b7
SHA1 287598e6d401da0170992ab0559a12ccea0bd51d
SHA256 e14c1ee6866ab9f0a9808f7bff1598d75c6e64a3741309fde3c7bef629918cda
SHA512 47f91e4a4fc784443416c5826e8d153d885a46938dde92335ef072b20faef8c83fce5440771034ae192437cd96bd90825b365d4050af532fd1f2bbeb331ef5cf

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 4e708f7de497b9b6cb6b68da1749c99d
SHA1 8e768c112242c3b40f41e24c700252194ed76208
SHA256 3bfde46bb8b96317c984210f5982353ab8a4b18e918ceb4e93f825895f00a2c5
SHA512 ff4e5656664cbd9e445f216acf015112d1c3f614528c6865dcbf215cdac4c285167ed54d1be2e4e5a1deba986ba5ba05688a963886a3bf8923ee4fb581098091

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-28 23:12

Reported

2024-04-28 23:14

Platform

android-x64-20240221-en

Max time kernel

4s

Max time network

148s

Command Line

kisi.com

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

kisi.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 110.201.58.216.in-addr.arpa udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 172.217.169.8:443 ssl.google-analytics.com tcp
GB 142.250.178.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 172.217.16.238:443 android.apis.google.com tcp
US 1.1.1.1:53 vahidtried.nitrocp.site udp
GB 216.58.204.68:443 tcp
US 1.1.1.1:53 www.google.com udp
GB 142.250.187.228:443 www.google.com tcp
GB 142.250.187.238:443 tcp
GB 142.250.200.2:443 tcp

Files

/data/data/kisi.com/files/PersistedInstallation5788207498391730555tmp

MD5 b561fff7369a75389328ba4c66a0a787
SHA1 75e667d348caac217dcf11ee6c474e9341520236
SHA256 9fadeb26365170ac602e6038f8c93925a9d3bb37219914bec7f4f09cca4321f4
SHA512 3c38cb3d8c0b0e12a110690e00186405f7a08022f7090c5270fa55ed4e1d11707320dbf11067a96043a60bc962ec08a0bdc05ba78e0438e8904e963fb9950f36

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 005375d1818656a722778d915a5499ee
SHA1 a82a9e1205c0507672e9209790f37ae9b57cb18a
SHA256 c664ced5807af8b926c93435189bc27963ca8a86cd0b48e251a3ecf8a3ea8414
SHA512 07a5894c87bd0949846ac7dfdd79b635c879fdee3e70709033db36b026c6b1f92899a12c777cbf42739cfe1367325b7cfa8cc463c6a10a5b78b3b6442a8905e9

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 a797acbad286f9729982a60efd927681
SHA1 94ce8c28267905b8941ae2c9fb76d9609361228f
SHA256 0185005046ce8b1445d8b572d2c1265bc2dbe4784fe58796934a5ac086641da6
SHA512 6e8a5a2234db311f53fe66b2de69a1b1811a050dfc7c23040fff6d9a4591a03fd75928a5605e16014fa4f9b518cfdc1b8153c663de1ffc70625d875dd1300b30

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 5c8e50d7f8b9e53d0b0c98d906d520c0
SHA1 ad13293571bbd1778909504165c02f39928a2084
SHA256 a768b06880fe61bb0720ee1ab1038ac62b62775d55716be82cdb0de47cba7ae2
SHA512 44e38da4c1199d6d9d59adfa89a5acff50a6b1608a6e707cffe9a22863e4ab9c389da432c7fd42dd6eb44df096fb1b0f0237b220123012ca80486daee754b9fa

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 b2d977374f6e0e09a90d464bc1956768
SHA1 21dc8b2078d438dacba841018d04126a6d235527
SHA256 866aee35efb273235c594f1c9c0a1f003fa9fbfa50e1a336316d94dca8851e6b
SHA512 64b286ad1a8222abbd0b2dfc9e85ad7ae3998ac3bd08dbe178bd3787513ed276b64bd40f4c2cbeea213d3afe4f5d4940f8aad88818da8e4a749da9bcfa675dd1

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 8289bc655e4c8ef5e9db83bcb82d0444
SHA1 eca3d3f96a5eb8e701daa652ebfc28d4c935642c
SHA256 fe89fd1a3203110ed932508b71a4697c160e3dadd6604aaaa270c3ff1d40b3d5
SHA512 247effc612001193097db8b7f0252d2798374fdab4e836284ddb5ae0642b7cb26b9194f52a6d9df387773732eb8029c733ba772dfd638b945349c84191c69edd

/data/data/kisi.com/files/PersistedInstallation5405086033020928377tmp

MD5 a7711135084a47e9286ebcbd336db7b2
SHA1 b48efc5da0253d18db24d7cb8b1d9c339afaae45
SHA256 d4b8148e1efdbe1c540b089856d23a8d4eca0772dab8ff3b883dd51aa9d6b7f4
SHA512 dfea5cd476a3d4764964864f4c98e1dc74e52bca2f60fa330cce5b5d27a9299cfb39512fc7ca6a9ac6dd5c95733b78a53a3247f4db0cb7fe1db3034a82a58e5a

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 ec0f75b5cc7f280a4b7ca858b89b5b17
SHA1 5796c1550cde4d6d830825f20914c23f27467742
SHA256 a6d45383aaf6ad9247a5dce6e38920b3ba214abdfad0a41242dd38a5b3e5a821
SHA512 6638c240cada6214cf1d093c1ff3b0356f3e448db80c3b061dff151631909a504c36e1a4826493b278ac0416b760cd216c534e3a23c99f80e7b30a0a10144a91

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 800ce4998423a7cdce09bf3792a08d88
SHA1 2f1fd731aa98d43974fb6903a0aab607e3faa923
SHA256 09e6668c87ca1b6f5a83251e11fb150e67f052903f5bdb7fd923b5ab4946af5d
SHA512 f1bdee49afd37255093e16b2b4265c399da39954474029fd811881324165974ffd828c8d4c369e9b4f45f88958a0aa6bdb6efad0500ce6c09ea3903d61c288b8

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 4d72ac04d77ca19ddad7df119aa43abf
SHA1 64501273884f90abb450ddee4cd269c3ac4437e0
SHA256 d08b329764864948ea2ea8dc381172f788b9d8af5e56f6337ddbd537a8a797fb
SHA512 0901ac04c147400a6c4891b11bce9a075d95c0922ad4736bd8ae17c021abfc316f6455c4b498ac7533c121b2e34a16c25bd9016b6eacbfa01889094952783f17

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 2c9192f8807bae1e0348b762592caae6
SHA1 029c99c5f4927646eb6866a04e8eba9e6ababe5d
SHA256 ccfe4724fe52226a92344bbfc56a836f30bb27e7a08e309f6e3f776887578776
SHA512 47b3b3b0475089555d941800d6e1d598c89536a1159fc0c2df27152dc0301429561ecd57b0125f54903506416ef99f75b13db8ef6ebe896746990bbc11631827

/data/data/kisi.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 0739ef821153f32662c6b59b6ab15338
SHA1 98157b109c61e67d4465e0ee855801cc49ba66f9
SHA256 c3507d1f371c89f1a187e28dcaa19f1b0a1357c7fa2f6419e6d447a72798e9c8
SHA512 588e6d40a496060086316c0cb7de02b6bb99f8f6836baf5985aa56b56284079ea98b8d461083090f3ac339b24abaebc02163c76e81691d8e1e41687622b63d8a