Malware Analysis Report

2024-09-09 16:12

Sample ID 240429-brrrbsee7v
Target 7e4143dd27644a0aedc66130c2a0a56e7aa556e75135f2c6a40c1106228e3fad.apk
SHA256 7e4143dd27644a0aedc66130c2a0a56e7aa556e75135f2c6a40c1106228e3fad
Tags
discovery persistence irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

7e4143dd27644a0aedc66130c2a0a56e7aa556e75135f2c6a40c1106228e3fad

Threat Level: Known bad

The file 7e4143dd27644a0aedc66130c2a0a56e7aa556e75135f2c6a40c1106228e3fad.apk was found to be: Known bad.

Malicious Activity Summary

discovery persistence irata

Irata payload

Irata family

Registers a broadcast receiver at runtime (usually for listening for system events)

Requests dangerous framework permissions

Acquires the wake lock

Checks if the internet connection is available

MITRE ATT&CK Matrix

N/A

Analysis: static1

Detonation Overview

Reported

2024-04-29 01:23

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral2

Detonation Overview

Submitted

2024-04-29 01:22

Reported

2024-04-29 01:25

Platform

android-x64-20240221-en

Max time kernel

144s

Max time network

156s

Command Line

kisi.com

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

kisi.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.200:443 ssl.google-analytics.com tcp
GB 142.250.180.14:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.200.46:443 android.apis.google.com tcp
US 1.1.1.1:53 vahidtried.nitrocp.site udp
GB 142.250.187.195:443 tcp
GB 142.250.200.36:443 tcp
GB 142.250.200.36:443 tcp

Files

/data/data/kisi.com/files/PersistedInstallation4212872128401213383tmp

MD5 55671ddc75b2ed7586cf902a174dddd1
SHA1 98f24ede0b86828196be5698cdcc712eddf5bb41
SHA256 f69479de27177b2e728d7bcaf771887183e36f6067404cc78d5f7d053b687481
SHA512 369f9ffc1501a5e09ca14d6d2d4db8a4f3ae3c0bf91cae7c49fed8acf2f7d857f5244961fb3c847788ff38c537eae68f88cecbcd93f7e68363d19e8aa8bc5e98

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 e43c2dce36dcc3e05c386b46876d7872
SHA1 1db83b929d6e78f6ad6d8820436301590a97921b
SHA256 fae2a9109dcde58e0e312ee4ff157d3285e6a25a010a3eb582c0ab97671d1b61
SHA512 b0a3bafbad238a6a8fc7911cbd2a26283b38611e9c8c7ab46e83be25d9155968fca82f2a533d3cdd0bd52764582a8907829bde4b1e144f52ba502a62b0d84b97

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 874e0e9fcb4f72392817e0ab26486e55
SHA1 e65e63f48a6d3a4ac49a76a2052b22f659253b22
SHA256 b30f109b27f636446b53de91951fd7c1ca1dcaf2c15c3dff482e0e870f3f7aa9
SHA512 c32fb203bc689e11cd439d612312c5aa19282b4c2fce1d025bb088c31b5520e36058ca1d83c782f2dccab7922de9466132cfa4b7b234d3cfa7cb6c3693c29bba

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 81222b9b147d39fe00c89475fe68dac1
SHA1 1a2ec2923f2e9a7c163fabbbd8eb99644e36bb4b
SHA256 a0e4d807a264a7893ab92aecc07fa20aa8d4c2e8a75d8ac8ab34ab1005428454
SHA512 2a1b4d69d88172c06eec944be912787e7a9fbc6a7f64538719aee95b374f7c28c78442d191b08d57f4c9a8ad2469a6a3775dbe0038600882cc6a48b6e1c99d81

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 8b7ef1d3165a1b623e952a53916e20aa
SHA1 cfb82a918a602e0981e8e09892aeb8ab972572f4
SHA256 7bddea9a38afb953537ad9f21c737ead3df00694cd3c1a85585ba21c40fba93d
SHA512 4cd5cb2422984b7a7aa71bd46a21b2e009e66eed929c8a0ca471a6f0ae2c46a0fd6018596a6fad7b012bdc8a1c4b624dbdf7c8eaa099ea4a809c6b5a10278d6c

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 2f645e2f9739f2607623b328925671d6
SHA1 3f903c7339157ebe0a5684ebbb08978555706c17
SHA256 13ba3a46737c93f74e1febc967750a962df6021aa8ff1ef479268cbfed2d18bf
SHA512 0af9a995a2b5deeb838d742afffa361d42e9930c475084869cfaef443aeac4e222f6a4833d579ad90fc8c066f9ddc17b0add565ebbca6c8b6c00cfdc3013e0b9

/data/data/kisi.com/files/PersistedInstallation2491767954658984007tmp

MD5 2a461b45fdf93b861feb6fa2423d519a
SHA1 d6209b7d00deb2d5baff440a33beae41edc1652d
SHA256 a43876f751d87f5592f15cbe2ba82939c9f0aeb29ff8ae10c2028dc11b33ba50
SHA512 35f8de2e62add108444c65c3e358fb45a39e3b55efc1ed5678f6a1f7af3f68cf81a0fffb3845b824baebab9c6930c7d0a34b33b8a39b70a546889611c13f61d1

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 e1d98008b752110576bcae369da3a168
SHA1 5bd776a9cfb20130273666eccc9e81c2a7a5cc35
SHA256 1468da325931113f55e2347cff7d72e9aeb774ca61cef99da9f7d19e9e728f9e
SHA512 f4ed47d37e8c069b0f3e0480aca59b5aee500241815674ca2f2d5d0318f9fdbb89f6ad9498b7064338d181f1c7d0586c5e3020bba7198fdada7b3bf1beb140d1

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 17cfc09e1c9593b6f782b5e7104d9b91
SHA1 58c92b9b63fa395998ec3a739a5bdc5cbb278f72
SHA256 095cc102222d6baeee46b5c4791d20adb781652ca59212b8a41ccdc97eb78802
SHA512 f0651d295c1e5ac6e0ad93fdfe7a875e05d93204bf86dd14da2609c6c68200cc9f4fa7e0dd33b7e7ec88b23e91f474bd80c5757732285929551d438205528ed2

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 4239fe29e2c23c422c66c7c2f217cb52
SHA1 ca96950338b293313d52ebc77964dc92790230d0
SHA256 c8185efd5e3f5d6b75e71d7ff703df24f4f72d287a6cf187ed93dfcd1cbf3aac
SHA512 f92c4330fa4b14e4a210c267303dbca58d0c2ea2977bfb93439cee875700ec296d6ce8447a73dda4fe23baf5deaff5f5bcf130631a5b43e566a3f9825710c535

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 86ed46ea23642b57aef6a0cdc4cbadc7
SHA1 dcece7ddbc069bdb94a26c8fba0f459aa832fea4
SHA256 447090a0a40a13a6e2c46b9ca29f0c6981625d892300682393fa917f3c024636
SHA512 b4b15e5102fed875e997b471b020c3936d093b21dd84d3f19bb0d7431c3c339d9477da32ff90d614dc4ed9161675a4fef3b776e44379d327eab4f6e1daa06f51

/data/data/kisi.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 94805238872a16fe33d3143f7ed8bfff
SHA1 23bd04cd9a15b91cc8c07dbff056b67fbc9b7ad3
SHA256 30d780776b91b43039372932d970493393980fa2305ba715aa1670187d9b9d15
SHA512 a62937e45d199a34d6ee7ac3064183dedefba67bb827124aa8df1ed40fb8cebd1071bf742b2ea8fca0876c9128b26e42d0fd5d4b6c29404978c88a99a76d7d70

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 adf6082723784327d7d1b34adf974e7d
SHA1 b1502f70eb881a1dfe41139cb719fefb877ee37c
SHA256 252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9
SHA512 762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Analysis: behavioral3

Detonation Overview

Submitted

2024-04-29 01:22

Reported

2024-04-29 01:25

Platform

android-x64-arm64-20240221-en

Max time kernel

154s

Max time network

144s

Command Line

kisi.com

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

kisi.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 216.58.212.238:443 udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.179.238:443 android.apis.google.com tcp
US 1.1.1.1:53 ssl.google-analytics.com udp
US 1.1.1.1:53 vahidtried.nitrocp.site udp
GB 172.217.169.4:443 tcp
GB 172.217.169.4:443 tcp

Files

/data/data/kisi.com/files/PersistedInstallation575754970751613453tmp

MD5 1f7f8ccda63942d4653e1b6707078491
SHA1 e051cc3d2cfbb36dfaa160b2438d11f215fcab71
SHA256 3e33c907c6a2078fb86d7ebc021cab35c83e87ac052751adedda7cfe599d49d8
SHA512 9bf831ed7eea2fa6ca21ddf134b3f4662e8ad3b1b5b7e610f36e11a085665c9ec74784e64e493ecfc03791c749bbe79345fde8a53d971d425e00f18cc5def48d

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 5324c5200ece89fe06905ff295923f22
SHA1 4c97b981cd7901c234ee99ae9feea88dde56e7dc
SHA256 9b78685a283a77c0a99dd49e50d29f702d85c50d7a7f753893179b9c2275897e
SHA512 511187efe54192cc3bf7fe74c7407db25f6ec74de709f18adc14e426571b8afebd7a82ba8031c2621e8600126f2aa23bafe9bb009dbef1a1ee3021b5c5226ecf

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 0fbdb0babf6940638bc88b241685b72b
SHA1 61acb4fc9f573fe51ba3cd80d7d835b3bd6b3a36
SHA256 e154c15ebdd7c2477af9ad796d35229e5ec2b36eecb1eb816374cf910005ead2
SHA512 bdc68f8b1f04de26fcc20c5cb9a97d4f479bec67f6d2a2652c5010b8d69bd4a6c654791db4c48dc6f01417dc71fd27f008290c272c0071e7e808fc0d6771dec8

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 940999610bf130b52ff6f97c01fda645
SHA1 a5757b3c18d98c8cf82d5fd48b064f934e3a97be
SHA256 81fbb8fcbffa2ca72f55399edb8e348d8f86cd685fa953a708fad5c7010ec6f7
SHA512 c9b42c8b57bc0dfdc2896182e87defcee75246a6bce51f5159106483646b649f38dc9a72b050b011907f155ac507ccc53a87d11bcd5cfb8e1c46afba807696ef

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 301963199d1e8c36aa079cdbf879df8f
SHA1 89e20af4fa4f4c5f7108ed18abfa2865c38fa578
SHA256 4e15326fccfda72f534b06c8529b2a7b242412efb22d28b0926df0342fbd23a2
SHA512 d62d2539046d0f34e07b46ab8ad0820a321e10beecaf5b1ee470d02c31d0a7a4d3e0fdf2034027c1d076c11ef48c3d699f983e76a09314737561af8f88076d1d

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 0933691c98956ae7311964d5b493ab68
SHA1 1c3eb7be453740ae9e1a285309cafb4d822d1e3e
SHA256 c38eba614071bf5e8b8d5db0b298dfa73b52e6b100e38de30a61e8197ee8aca4
SHA512 7a8f19f6c1a89e3306dcb87c3586fb68bb747e5fe46cfaf3215de587ff2a2798a6bbccceefa2c1c17732c521a11dc8043df720792b2b8263d1cc0d1a2eb4b2cf

/data/data/kisi.com/files/PersistedInstallation5576362524937479114tmp

MD5 d98872bd884c6226abb8d99e509a7b31
SHA1 11af2ad5d7309ee9c8d39137dcd716863c45cbdc
SHA256 4768cce5054ecfbae7d7e71e79ab2c99beced1c28af2b5ddf55eb3adf88f52a5
SHA512 3fcedea21d03e8f18f5d21e5551cc0525af3d0c05b5ab273732ad847676d7c574cd80d1e4ecd10608607cc572411b9c4e5d57cf8946e196932870efcb3f1e362

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 2899d1f0a82c32bb7be035000d412217
SHA1 ab19db92366eaf743fba87ee8fe86bb51f3a32ae
SHA256 13d14c72935f0638935aed1000f0c0766db361b9a2ddc2f1bee6f5c68e2cfc68
SHA512 2fd46d3679f318d60166767864b0f7f28dc15613d9184b61dfe3d30b62ae8541d069260bb01be345ea00d6cf6d7f9389471c445fe85707085dcb1070550b7439

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 f51f2253eeaddd397bdc42cbadc42523
SHA1 f5ef0d5a844996fb9fd70813a2a02742eb7e2569
SHA256 5992f1eb5c505111c6b3551dac571830fc14b0ca16bd7a892ea499595b4135db
SHA512 ae70f268b2260e3a1c4798870b27bad11a4ab842e2c36fd2a41c6a3c92a6b9873f543b81c093589f4a79597b9e4bb08e7de308c6a95584bd3103999bce60b9b4

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 cae41c33fb6d20d7b8f8c14139bd5f71
SHA1 678917a59bd88b6a1debb20d603b834d91337ac2
SHA256 0b5c843d00a10cf32047f6273795c9c0ec7ecdea9f484058cfae21d5b201b2d3
SHA512 644c7c9a3eb81533e271ade9076e400cacd1834609d1cd2fd0096e290cbbc76977c294e5339b21d0d8128bf9fd15266dafe4306d36b9b0f79453cb61295be80a

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 4ce6b00df2b794bd894ded2af6342059
SHA1 4ccd2462b74eaf186bafbfbefe4008992a9e9488
SHA256 abef3ec8a7a1098be98c3386fc7157214a9bd253df0a0b215f0fbffebcc610e8
SHA512 b9ba8d429fbd67cbf45f763beab850862f3c6ba25624d4e69517d2905a34d4d173ccae59407b3e26da4a30d939b61637ffb9175c4c828850b706c87b142f1b52

/data/data/kisi.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 f04ee113f3d738dc127c835717514caf
SHA1 4fac11fff9dca1da5688e3229337e214130637fc
SHA256 b1563d02fe58a7f873e11c44fe200a09ffbb2d4267142b92e307ea7028639055
SHA512 f819e80b3859f307f7e564c230061cbf811f9dc658d2f0589738ac01d5e273093a85671520c46d0fcb667a4482ca6fef025bf5456247dd2e1b540db193896d01

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

Analysis: behavioral1

Detonation Overview

Submitted

2024-04-29 01:22

Reported

2024-04-29 01:25

Platform

android-x86-arm-20240221-en

Max time kernel

5s

Max time network

131s

Command Line

kisi.com

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events)

persistence
Description Indicator Process Target
Framework service call android.app.IActivityManager.registerReceiver N/A N/A

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Checks if the internet connection is available

discovery
Description Indicator Process Target
Framework service call android.net.IConnectivityManager.getActiveNetworkInfo N/A N/A

Processes

kisi.com

ping -c 2 -W 10 -v google.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 semanticlocation-pa.googleapis.com udp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 14.178.250.142.in-addr.arpa udp
GB 142.250.187.206:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
GB 142.250.187.238:443 android.apis.google.com tcp
US 1.1.1.1:53 vahidtried.nitrocp.site udp

Files

/data/data/kisi.com/files/PersistedInstallation4012921568988120674tmp

MD5 99d3caf40fe25d67a9ea83960d68aab2
SHA1 645051140e97b2c3517f91a09b7e427e0db34c6a
SHA256 a109f25d931a00896f6013d2e0e88020400c9fc3cf2befdb209baf05608fdb15
SHA512 e6ed00b39121e87210603c67cd803325af4936a6dba27711e865f666a39375d4607b67b2d862e0de5d391e87f8f1c6b93dda49f1d6c805aa2bd1f65c498b587b

/data/data/kisi.com/databases/google_app_measurement_local.db-journal

MD5 038190c06435aa33bc182a27bb187da4
SHA1 e0db7d74515687a768b65a7f704899f33c8a815f
SHA256 adb09bf82f2f23b6095471d3c0cddaff1d7c7d337eeb0c95808d8a507a2cff4a
SHA512 91183ce88b44555b395941e4bf87781320e7807b1cd7f064b5146fd5d6c3273844512e6d45c53157d8eee4f00ddf5ee393481842037162a8fc570eda67cd7bfb

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/kisi.com/databases/google_app_measurement_local.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/kisi.com/databases/google_app_measurement_local.db-wal

MD5 65d277c7379a0ff58ff5d22e5e0e6cfc
SHA1 5bd1da8a1a49a673e0505096e8fe5d0b105ec4dd
SHA256 b5bc7d9333a4c3999774b5c333d98a9ce922821a6cc2b3dae7bb55935cb05078
SHA512 e465f4f5601191a25a5132a9aec9c3c4eb908fba87f8a130ca7eb44e4b9590abf816780c7080bd870dd123ed458ea7dc59b7a1addad313013d6e4ad0c67e9463

/data/data/kisi.com/files/PersistedInstallation6457265035023799218tmp

MD5 6fcd51df83a843b10936a8fffebd85f4
SHA1 09e4dd706dcd9982314634cfbb54bd9639218c71
SHA256 bf21cc4b9f42d2819a29617f984d8fdfb311543536d1c041bf53e843673c2192
SHA512 f1b8c7697805ad6c26054d11ce17250c2f7958962a09e5b6567fad3d2dc88b77453a0d9c01de303a5a3652985d45ecd7fa05f0421eb4969c0b298be63d7d4052

/data/data/kisi.com/databases/google_app_measurement_local.db-wal

MD5 82b57b83524be2dc01e134ed2c87504d
SHA1 2acabb317eea908deeeb9757609ebc650683450e
SHA256 938eddf0a0716ce9d785dbc83f7aad8031efcafe22d6fd7503ac9478a3cfe07c
SHA512 8ba1ab65365995308ecaf45d5064a532be04bb9ab2fc103a8519e9edbea7085127582349acd22f96346825f0b45beab523727fcae5ea06b917d8a04f046986f3

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 f20b52b0e352bec593300afeee18cca9
SHA1 da26d417c0cd925c6c645a478998e482bc6a9ca5
SHA256 4a9a76e0f0d9174e50e556a3f4b5cc0c7e8b2d046a15daa73b4db27b501c9746
SHA512 150870da49c55ddd477466d634945260b525b1e0f442ab980de8663fe179b08e5f4c105860a73148d8c57c997b374eae35c447b8cfde067cde873af37f8b2e58

/data/data/kisi.com/databases/google_app_measurement_local.db-wal

MD5 3d977577673e17fa6c3e08b42864e142
SHA1 0986c20b430e3c7d4770814b00816c3d0effbe54
SHA256 87210914c6e71773a33a780b0a950075f285f6ae9cba0b741e82a8debedfb84d
SHA512 e613cf08820f87a9bdc8bddca30760b4570e3fa1c1c899e502c20e2bc882c87f0ba8e2b6705bba2c67139e425983018564172909e7065d266904f84227f06076

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 02edc9ef0f6e833889643def559c44b6
SHA1 eb9ad314884104bab117f8195c2a5a88db3de8b5
SHA256 b4088b4b8e0fc519f5130da663e81d91fd5ae4e5339118ddd1db5f5ceb7a8bbd
SHA512 fc6a0cf986f23c1232ee9e7e314de03df0120a04b7c0ed50d5b66f5586a68d2c54a8a924e8486bc3d27182c19432dc9108281aaba3d20b32d64286cf89f73b17

/data/data/kisi.com/databases/google_app_measurement_local.db-wal

MD5 c5ce1bcc89e2cf8d3b5eab7abec87e35
SHA1 10c71241f353babb57d4da5268cddb80d2efac11
SHA256 15779e3b0d658bcf7c2a38ef2aef46bbd3facdc6e14f950db6140d460da3e0a1
SHA512 c554cf9bab615f6a08f29d33c365517076f52af34228a970fc56be7573da24fcd054e76467cb4bf4a340bfa7350c68cdfb13a1f32b6c0fcabae75d793390bdd1

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 e2bcee1689f340268c4f5c6dc7f06234
SHA1 109b93c3ad140764153247b55560ee5f6ba464c5
SHA256 377ce4cb38364cf62d51267bb9012cd722b131378c8a3dfccee9cdb7bc0a9833
SHA512 fe239b54c0f5ddd4e22a9b123b61a298fddda9da07f847940bc3a03725da7e1aa01ebd8901a67cea6027bde424b5ba9155c8c7120e994ea299c268ef173f4be2

/data/data/kisi.com/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/kisi.com/databases/google_app_measurement_local.db-wal

MD5 c9d4a678d1620928bb0308a2aea8aa94
SHA1 ed5eb184810e4ca2cc8aa5ed0c6e3ba3301b6519
SHA256 b7045efdea29b4d88148fb3abe721099312c2c7e40b3dfd710252b331dfca328
SHA512 d429a39f8d362cb9f6ba7f0b365f6eba316cc845942db9e620e189e286e8fe5fd2a773aa6705bf4bf052fe94df985a2cbc836c9cb63e60ef3c530350efee0e67

/data/data/kisi.com/databases/google_app_measurement_local.db

MD5 0bff5bb867cbabbdc4ade9099f5d382c
SHA1 0d57edcb96b8ad06554e9f9e9d7d8196c49fc1bf
SHA256 46df8f46a4e1ef2a59f7b97ed05572c61d9b59c382a5afdd8288bdfb195f1490
SHA512 4319600dfd0c1fa33395091b238af6df6d6bb53014b3956a3dff93039cb186989f1d562f19fd59dc42a702d007b3b4a47a988aa250272568bc0642bef6248b71