61aec9c3a1c40ae11c09f76dfa4434edf73401eaf008c81a0f859d51593d0cb7

Analysis

max time kernel
179s
max time network
187s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
24-05-2024 02:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6d09b0cc1aa7dac869bb1873f550765e_JaffaCakes118.apk
Size

11.5MB
MD5

6d09b0cc1aa7dac869bb1873f550765e
SHA1

e343d031b2c1403a31adef3d6a0f5e618fd514cc
SHA256

61aec9c3a1c40ae11c09f76dfa4434edf73401eaf008c81a0f859d51593d0cb7
SHA512

9b92bd1227238b5f615664b564285454d8a1beda1738e7a0ed265bad137e83a8ce1f634b6068793ac1f8da8bbe6cf2ed0a50a7595be6d0ba49643dfe90f64a3c
SSDEEP

196608:SZWwOqAepW1oKk53fbqphoNReSYrvnxb757BXGjnHHkp3khxuntw5Kh6ZNZsdeEI:SZY1eH5Pbqw/A1P/XqnHHXrutw5K8ZAU

Score

8^/10

banker collection discovery evasion impact persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Requests cell location 2 TTPs 1 IoCs
Uses Android APIs to to get current cell location.
collection discovery evasion

Location Tracking
T1430

Geofencing
T1627.001

Processes:

com.kuaishou.nebula

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.kuaishou.nebula
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.kuaishou.nebula

description ioc process

File opened for read /proc/cpuinfo com.kuaishou.nebula
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.kuaishou.nebula

description ioc process

File opened for read /proc/meminfo com.kuaishou.nebula

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.kuaishou.nebula

description	ioc	process
File opened for read	/proc/cpuinfo	com.kuaishou.nebula

description	ioc	process
File opened for read	/proc/meminfo	com.kuaishou.nebula

Queries account information for other applications stored on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect account information stored on the device.

collection

Stored Application Data

T1409

Processes:

com.kuaishou.nebula:messagesdkcom.kuaishou.nebula

description	ioc	process
Framework service call	android.accounts.IAccountManager.getAccounts	com.kuaishou.nebula:messagesdk
Framework service call	android.accounts.IAccountManager.getAccounts	com.kuaishou.nebula

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

Processes:

com.kuaishou.nebulacom.kuaishou.nebula:messagesdkcom.kuaishou.nebula:pushservice

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.kuaishou.nebula
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.kuaishou.nebula:messagesdk
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.kuaishou.nebula:pushservice

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

Processes:

com.kuaishou.nebulacom.kuaishou.nebula:pushservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.kuaishou.nebula
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.kuaishou.nebula:pushservice

Queries information about the current nearby Wi-Fi networks 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current nearby Wi-Fi networks.
discovery

System Network Connections Discovery
T1421

Processes:

com.kuaishou.nebula

description ioc process

Framework service call android.net.wifi.IWifiManager.getScanResults com.kuaishou.nebula
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

System Network Configuration Discovery
T1422

Processes:

com.kuaishou.nebula

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.kuaishou.nebula

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getScanResults	com.kuaishou.nebula

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.kuaishou.nebula

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

Processes:

com.kuaishou.nebula:messagesdkcom.kuaishou.nebula:pushservicecom.kuaishou.nebula

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.kuaishou.nebula:messagesdk
Framework service call	android.app.IActivityManager.registerReceiver	com.kuaishou.nebula:pushservice
Framework service call	android.app.IActivityManager.registerReceiver	com.kuaishou.nebula

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.kuaishou.nebulacom.kuaishou.nebula:messagesdkcom.kuaishou.nebula:pushservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.kuaishou.nebula
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.kuaishou.nebula:messagesdk
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.kuaishou.nebula:pushservice

Domain associated with commercial stalkerware software, includes indicators from echap.eu.org 1 IoCs

Processes:

flow ioc

23 alog.umeng.com
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

flow	ioc
23	alog.umeng.com

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

Processes:

com.kuaishou.nebulacom.kuaishou.nebula:pushservice

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.kuaishou.nebula
Framework API call	javax.crypto.Cipher.doFinal	com.kuaishou.nebula:pushservice

com.kuaishou.nebula
1⤵
- Requests cell location
- Checks CPU information
- Checks memory information
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries information about the current nearby Wi-Fi networks
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4279

com.kuaishou.nebula:messagesdk
1⤵
- Queries account information for other applications stored on the device
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:4345

com.kuaishou.nebula:pushservice
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4446

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Execution Guardrails

T1627

Geofencing

T1627.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Stored Application Data

T1409

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/19/eQkCP1xBbdqfwj_YO9bMg3WSs9I.1940972991970512341.tmp
Filesize
38KB

MD5
030b61b8bc1f2e6e885a82bfbab6c9a3

SHA1
deb8cde4e32ed4cac8aed28425a94417c43f61f6

SHA256
6954aeae063764d477b754cf1fc6f9ab4a98813a857cca46f90d169940df118b

SHA512
87a91d0147bbefdd7f690cd042a30933ae682a3586e039301ad6fb9fc522553b60bb325d4904efa773e4e3c71d53d6797bc9b4565d8aaae0c52d6a7df4f056b4

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/29/vlRimTcn_S-CF3Ogx0TJZdM8ILU.8890119250054696760.tmp
Filesize
8KB

MD5
09aaac4d1484d0c167254e698d053717

SHA1
97b6fca8c47c304ac92ddddb443d6a59a596d137

SHA256
9ab4e4e466f9d387112eb1c6d1405b1d2c1489a76381052173a559cc53436578

SHA512
8c907992aaeb2536216de682a64f5883d5893670985cf21c452bd7449ce49ce726bf55c8254a4fb66d016fb49fa8ab632ec4f8b2628555590439c5dce3b5cf06

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/4/r1DRqk_M6uBriPMfAGqsRJA6zzE.4651212914399602461.tmp
Filesize
20KB

MD5
2a754cc7790abac90b3842b35e125fa4

SHA1
dae79ff99a857e6c1c768f29a2303ef99ee3b8ed

SHA256
fbeb288e7bfa2c0b3b5cb0d4a6018bb48bed01a90ea22ae7a46fb8b51707c750

SHA512
f255cc6a09ce2c03dcf3ffdf93e9253eb484aace00e9ea365d4453f7dc4268efe354299af4285c850e548523feea17160a3d92d042921206e5a2738d11d73474

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/42/9PJftTBO-u0UZYRorCu_MT_6Ey0.315861814892578625.tmp
Filesize
9KB

MD5
ed48c24eeff7a3d89a29645d13d6949d

SHA1
650e4476adb140fb2fcb6585cabf6d1c206a0c6a

SHA256
b7ca63855e90c94f1a23f083fc0cc4fde1bacb95a66ca65c9acc93d64999f9ef

SHA512
1d8872e915fad697dd722579ec1e0b023a953b782645151c65281fbced514697681a7e822a1a1dfe8e54afb6178baf7b23abd67f33879753977df22a27214834

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/47/duA4_AworpdTQzfYWYVyfPMEzMc.5239275678413868123.tmp
Filesize
88KB

MD5
561865b80d8bfb62ae62648f3388316a

SHA1
027df05c2e9b1c10a39a3fd0f593c99ae2ef1527

SHA256
966180bcdff58bbc83fbc19944d91d280834bf0c091dc06ef651fdc874121eb3

SHA512
45fe95afe74ebc05505626a74d855005a93df57ab5ca9e898ff781b2c495c97e5c33be9103e6604ba7fe4d42e2096e97473997ebea406fe88a85b71afff78c2b

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/48/5isTPeh23Q0uOJV0Ot4nvViiFXE.5623246564990328310.tmp
Filesize
43KB

MD5
9ed3847df16f0645e4b90fc546bca990

SHA1
566c1ae36a682722a551a4a576c2bfb484041ece

SHA256
61e765e365ae5aca7833f7844057277de8984006fb6f71944cbead5e6c2e102b

SHA512
0d921286d2d656a1b932de1d30d951c8e53e5ff5c4755c0d0b9790c7f65fb428de8434f50115c02bad65c40df26bea81ba6e078f1695eb4e4a15be9331280178

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/48/WBYYck-Sf8PBKp_r79i5WG_dhyU.7190184013189295722.tmp
Filesize
45KB

MD5
7733c379c2ab4c62c39976dbb395af54

SHA1
45ecc3f17542efe3a2a2663f62b9f83edcaafe58

SHA256
e2c40f954dbda2db74205fca4ae9d0c408c91cedf34e3900c2da2864a7926a2b

SHA512
0d6d4fdceb1b86190a93a33e1f0151284ad840ae09b600b68904c819938faa7f5ab221371ba0eec85de88c5393008e7224379ef2ae45592c7aaab71afc29fdd7

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/48/l_5JdfVzXY5x0Otkx0jLkWQ6QsM.5419596914763744695.tmp
Filesize
36KB

MD5
a816e94776c2479221abd617a922b4fd

SHA1
cfb4b32a327285bd123126a363e19f82a5f50e77

SHA256
8f55c05d9318baa4c579c04baf62c2f9f6215c1a9b26cd424d70bb0e6d256db9

SHA512
a9b10a5d0d1dd238558c335e0b59e8f60364080a5548a26c81446a03c103539aa8867ed9136a5eb40f33f74c868cb23d2fa6f4631eb758d74d559127d94e37d1

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/58/-XDBhGrxtnuwC1iVCq3MEf0G2PM.314204539208379076.tmp
Filesize
12KB

MD5
0f2f0d0ffed110890df6674c6a733d15

SHA1
905cfd8f45832ecd7b44981c619c4f3a81fafc7c

SHA256
7fe6bc945d856d585461a53c8ac0fcce689bb81f6eea99d2ed5d9e81d5a640b8

SHA512
c0b98f62cfe1c539a74eb647cdd93de2f571b56672434cafd009797380cae5dbabb6cdb0af4df197f285912f5e1e8f8e4c7aaecaf18bc0c45e86cedfe5fd1582

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/59/-jMxBkMLq6EXmlLFoPDu5VLqvAI.7304349329442319369.tmp
Filesize
28KB

MD5
44fab351382e734f04b3a11cb5f5d14c

SHA1
6ea6ee9aeafb2af6fc9e26114b279353ec32de2d

SHA256
ad8f962ef1bf085b4c55f708f231dc8991e258d7c8dcf53e4c923be7c56be41e

SHA512
bf14dbe3922daadf7cda184a1b4a79cc87ef1134731342b5fb8cf353e2915ccb7074ace912315341e625bab723a34ae2b7580fe942e2904c666a3295889e615f

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/60/au5wnkOS-5_10-aTdbdershn68I.2077192457293364448.tmp
Filesize
5KB

MD5
732aae28effaf39635a371c47cf0af25

SHA1
59b0ff41223a70442fd8625a875503276949b259

SHA256
eebbcc2c6336df9fc0f6bb2855af86399fc2d78c6e2dd0ccc943ebc13a0b372b

SHA512
cebb81232db2226c9699d6b6c05f79c996e9cb79fb1c2d4a2de5110aa4eec040f36e92ba41778dacf0fc99396be6c6a0a2a31c7ef907402c64def779c4e5bcb9

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/63/NPcysBM_-bdpQNJgcrgiaYdkXXg.7042322037171933340.tmp
Filesize
37KB

MD5
debad3549831043d50140b7773a0bb29

SHA1
742ab9c58cf7e58e66f628a3ea3529731287d579

SHA256
ca8c736c49a67c47757cad51ce701f26ab0d443afb202552e499bcd5649f20fb

SHA512
4cabc474e16faaea44665d4a0b959fc838e99e9a2a9e55b2c0f57b0fc6c51bfae51d805c8e7f7276f9467c895ade5bbb7b0ffb1ab9f2b71b21de78ee856435e0

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/75/0WiUMlU33u_tM8bHpPojq_BK9L4.1499885213209799641.tmp
Filesize
57KB

MD5
ce4830cfd2e3a2369d43f4194c82cb62

SHA1
488bbd454d8e2a96a9edb1e2d80686e5cee716a6

SHA256
445615e685490ff9630eda2d7415bf03fdfb53d1da28746380fdf34867fd30b1

SHA512
b65ec1ba0ecf44719275d99ef56f517062b83647c43856e61c000efb34c711d715b8c427213f88e9e0866aa712a41075afb9d41b22ba657a97ab8430540a5d6b

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/85/YByGALACPWodbuxOTXyTht6Umaw.7529796778394507773.tmp
Filesize
9KB

MD5
d58dbc14db15d595c9f376e2bb160304

SHA1
4b31fbbd13d15db3901dbde3103bcd9242aabe64

SHA256
0dca89816668e5d7e219faf97080511cd6ca04fb6e13360a9fedcddad13dca7d

SHA512
bab778e0d567ffc25d0454afe85a23d3f586f1cb290d0309e705e73d0aecb679cf4c1887de69def076e13917f3c001af920d458f579a959268c9209082470732

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/90/iufCvpmltNW1OMc3f6g9_Uk5cXM.3259189173892769469.tmp
Filesize
14KB

MD5
62f86471b3387dfd14aaafeb554cc512

SHA1
7ec6e77022ffb0f4d4ddc8b5b4a38a72ce362843

SHA256
ca9af6a07bde293dd14faa67feb526181358e33024ad9011e682dba5cfb62384

SHA512
9679d73c64bfefe0e4a880e216a3f684f11c1f27be2a9855d7e319bae83e8c61caf1ad82927c007b00c144486d64dcfdeb3fddea9adbc67887a1644c2d7e7bd8

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/99/Robw_hEqIwyHR07dZjYsNsx_CLM.8548559368509932210.tmp
Filesize
54KB

MD5
b8e80680f6026ce06ee5f2a10ef01331

SHA1
3cba78efce648f59837049d434104467415b8179

SHA256
d0ae0b078609cb9910cbe19ee6826ad1c546b5566ad61e922fb947a51f2d5b84

SHA512
e85aa5a5e2b0fc720d252ac323631b747b613cc998f792ba57f99c5b55f777ece4fa2306d7bcbce37dc97056774ac44d01608b16ad405f5128dd5ffc3f261943

Download Submit
/data/data/com.kuaishou.nebula/cache/image_cache/v2.ols100.1/99/rDoPw9xqRH5g4YeffmyoNh0ZYbs.4453373309225473433.tmp
Filesize
30KB

MD5
223c0b12beebc60d6fa6db93f4f1cc7f

SHA1
18b5b6130d9ae893b5b2f269ae7fcf1c69e17b6e

SHA256
eddff7addf868966872a40a2db20c0cefb9d09e7f9dbe4b189b2042ef319e5ce

SHA512
25a213265c0632ccc588d67059626af5dc8df75ebec44f8db352e8d5bd4b779d6f96fede9fba8912102390c2e7815d681c03b44c657ff3c32119afc014cc2246

Download Submit
/data/data/com.kuaishou.nebula/databases/cc/cc.db
Filesize
36KB

MD5
ce6135aa1b1fe4f2c2db2a546d2a5558

SHA1
79b59582154017aadab783dc266fcb158c252940

SHA256
7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

SHA512
2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

Download Submit
/data/data/com.kuaishou.nebula/databases/cc/cc.db
Filesize
193KB

MD5
22897c88c65919219a84a66dc135a319

SHA1
99a4a0c4d6cf19c22b5114d6a213c9966fdf4965

SHA256
be4642e5260726e864b9aa3bb7c27fb8832d5dfd06be53db52f9f6e62c693999

SHA512
8577e7fbd92b88c8864b108d56c6e2a064a96241ab6b1232f0901eba17651534a456207e70d9546c355ee6bb9644c3b21208f1fa71615cbafcd3951566028430

Download Submit
/data/data/com.kuaishou.nebula/databases/cc/cc.db-journal
Filesize
32KB

MD5
21995d8e22d5121fae2d78840338d680

SHA1
0e8a966e8cc17abd95e9728a63f0789c885bced9

SHA256
c6ed6b27b10dfce7640804dc8aa202fe4cf37102702e353d0440b39ca8634589

SHA512
fbadf2c48a9e8ea936aa93ad8d5e1139461da0f253ef3c617a0b5bf488edf213315eda820d997a2f697f9adffc099af29e5be3b5d2140fac2adbc6c0970b0e05

Download Submit
/data/data/com.kuaishou.nebula/databases/cc/cc.db-shm
Filesize
32KB

MD5
a7fcb9cfc2260cdb11674745c03d7c74

SHA1
5313fcd5a04c0de74279a1db82424154db11d388

SHA256
918dffd3cea3fa3a184c9cc3276cd47ea1fc04d441a8a02424ab9912d2967d76

SHA512
4d31d8ff0be08520ab83f44b3990b6ec2dc49e90385b89dcbcf392254535b6de4f2a3414ec430b41ecef4322a55d52789f1215bfc2aa82b3e467ee9885e15095

Download Submit
/data/data/com.kuaishou.nebula/databases/cc/cc.db-wal
Filesize
16KB

MD5
5df0434717571a476eb2eecdf5260b36

SHA1
c0e0907489cf3d49b9e277208a84cfe329560744

SHA256
213881d7365929e92e265decd1adbbc9dab1fdc2faad0953141d7faf0e450128

SHA512
3da46194569fd85dcb471e73949a285ec1316c70df55ae54d73c356036598c99c9d32a1df128de5fcc7c9aab86c16de8102eceae703845e066e2521317a49cd3

Download Submit
/data/data/com.kuaishou.nebula/databases/cc/cc.db-wal
Filesize
48KB

MD5
b04a1e51239cd5fb9d6c96c45ff8deb2

SHA1
92757d05edc94ee668e45e3af65b4c91aac7ad3b

SHA256
6e1e3939e88a4cbe85a0c73e86a4fd3bf8469949e694e8731a79296dbecbccb0

SHA512
81f2927ff14b6b4d58e6f3ed4b1b51e955336616c8c9907f57a7623433575618836749d8ca1c5ca8bf38752dc5ac017375fab1dad9a7920ee04b2c848323f02a

Download Submit
/data/data/com.kuaishou.nebula/databases/client_log.db-journal
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.kuaishou.nebula/databases/client_log.db-shm
Filesize
52KB

MD5
54788268f97ccda29d94f7890c2074c3

SHA1
43480b7e9bfe3504efb2a68935f61d93ec15933b

SHA256
f8fd2a91d23631966fa5ccdc9eab47d014dc7a77180fb250ad6c2c0f821d5c14

SHA512
dc5c7500f4f4b8e5aa144b175496edaa48637d8d5428f4336fb675250c9e25a02b8f8cf7e966e22c0a56bc578f77aedcf6b1e9edf001049035f2db582e2e7d2f

Download Submit
/data/data/com.kuaishou.nebula/databases/client_log.db-wal
Filesize
350KB

MD5
03e8be73594db088cc8e128bc8760f08

SHA1
3ebee93c5f1bbf27854cd9a2d63fe63de482d6eb

SHA256
912711d70f6a51b1430364b93fdff08f89a94d31ba72f79929cdae557ccb2d20

SHA512
ae836ef3a0596ff5b056fa0dec2727e18e00f060a834b27d6d579979d05bed89f8db9f3ebe41b75004483bd532d41a326c197d4976dd97e0e5b7e5da6bdccb01

Download Submit
/data/data/com.kuaishou.nebula/databases/kwai_im_group_db_0-journal
Filesize
512B

MD5
beecc081ab6d4f376c9dc12b4125fd36

SHA1
762d25618c175b88e549ee600ef79d57596c84cb

SHA256
cdd8a1e5fa00da917cdc40d7bc615453f092832ad1a5933acf02d6d3ac257186

SHA512
9b029c252c1586cc5afc929cd36298dd89de926f3793874aab9b104c3352f394f3a0e3ad913f325ac129735519c18b0f7562b6265f2ab216e01d70b22b9923d0

Download Submit
/data/data/com.kuaishou.nebula/databases/kwai_im_group_db_0-wal
Filesize
56KB

MD5
5112f2db5ec4144cbb61faeb556dbca9

SHA1
651058e78f351c5ba6b2d42cd1f21529416f6cf6

SHA256
5823d19b11ccfee388f77277e37d2a4bbcf2e8c0ebd7f97edd4be82fb3d46d5d

SHA512
4545dfb441efeb5392a5b8023da37fd64f1bea404a8d45a00ddc2def398be811d5056b62baecbf75866be870e962abd1dacf7259d2a184c16654339654ab60cc

Download Submit
/data/data/com.kuaishou.nebula/databases/pushsdk.db-journal
Filesize
1KB

MD5
55c63f3420a2c1bbfe9437c18e9a52f3

SHA1
fe768c2713ac37e9d5312e370d325a3ee04eec35

SHA256
418c9e272076cefd9e0b8d9c390309fd3a698f725413ceafa9e68a188e5ee834

SHA512
fa521334044f7282779e69cb3face2dc274b289164dd7cb14aaa0612facd16f606304cad721ecbcfe0b8936ca6cea7a4970935d7ca0ce4ea855d47896263a663

Download Submit
/data/data/com.kuaishou.nebula/databases/ua.db
Filesize
32KB

MD5
d604a3bf1f8d992cc320ea5b1f7609bd

SHA1
247f88df0b55c7d523ea5398637711a0e4a483a4

SHA256
329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

SHA512
67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

Download Submit
/data/data/com.kuaishou.nebula/databases/ua.db
Filesize
32KB

MD5
38cd39e0432b78fad3751c575538b075

SHA1
58bfd740538616d4fcd88305b92d4d2ba0004127

SHA256
d89d0c5250d8259e80e0d61031d48e7ab6b454fd0a3060ff751de38e88392ab7

SHA512
1d0d08903fda00ae73b4c3205ad93e3782394779f02c7cb2d5fea041ee63e1b690e563109a17639ac6eb0c0a32b40af8726a58707b1eed74adda1db203a2b524

Download Submit
/data/data/com.kuaishou.nebula/databases/ua.db-journal
Filesize
512B

MD5
1d5387ffb92ac8df14cc078221205ad2

SHA1
f431d25e29b143e0048d03c674abcdfa43cbf306

SHA256
455282b60ca73f1d0037d2091f90a1744a20135385065c4644d4c46b6c6280f8

SHA512
e5e7f4a9f572e0119c844379f99653c49b83b52552b0e02e10c882e6488635dac6128fb3bcaa5eabaaf8a1b0e7c19d59aeaf6a500101478b83f3fead67c08c07

Download Submit
/data/data/com.kuaishou.nebula/databases/ua.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.kuaishou.nebula/databases/ua.db-wal
Filesize
56KB

MD5
c151f61d5ed7449f12912a33351e4ba1

SHA1
83afc9a705d12aababbbfd28550f0886606e139c

SHA256
eba5a417cf0595d68291e776a141c3d915b5b3ff42b96dfe29fb08bc60d8660e

SHA512
bfa6cc97c610de8d9e0dc508dbfe90d156e55872be50fa41a6ef16da94ca17ea668c629c1a8f8385ce69f0eccead95f0dcf1b2758e3743fe4e1240bf0808c876

Download Submit
/data/data/com.kuaishou.nebula/databases/ua.db-wal
Filesize
8KB

MD5
9caeaf8d5ef3235dc150bff46cc8454d

SHA1
2cbf6f9f273c120b7e2a830956982dff2d7a2af0

SHA256
2bb1fabf6f47442bbda7c8ee0373b88d83573be2ff0293bb79a8580b7dce081f

SHA512
fb571709140a344c1b49997f36a696fef8141d9b6c72f71fda0cbc4c30e4f8c3353a22fc2f797425719705c4b6595788c45e821c9b68f55a4c5af3e4dbfd2cc4

Download Submit
/data/data/com.kuaishou.nebula/files/.imprint
Filesize
1002B

MD5
865dc466ed608e34d194ff2ef05747de

SHA1
b93a82290414d6bc760e561393cdf3ccabaa7d66

SHA256
f762139d2024195be4c11dcce06b6dfa923bc31761681a53dbc1eb51e76daa61

SHA512
795de3a130394502b7b787c9f9127127a2134f227c5673e8c8dd908122ca4364d6d52fd60de13b51a72bbaf778f5c44cd445be468ba9debae29208933d70b16b

Download Submit
/data/data/com.kuaishou.nebula/files/.umeng/exchangeIdentity.json
Filesize
162B

MD5
f2d961c3952a7160ff82f36810de4883

SHA1
560550f5e50f70675eee4f376bacbf7651878fc5

SHA256
4f1436c1c40efee27e758ae03dd0e08825ec9703481009d988ef5cbc24103142

SHA512
d57fcbd786082f82650dd0f03ccf182fa461f0a69f0188fa1d477f814a32cf569651c3fb98203d8783612a3af2f5dd3da7fe1b101c04c5cb74b13daffabd887f

Download Submit
/data/data/com.kuaishou.nebula/files/init_c1.pid
Filesize
14B

MD5
9bbfc1adcb7a54960bd591a27a2dde2e

SHA1
fb813fc244ec02166c6f8fe3ad8ce42ae39fb00f

SHA256
f6c43e74cd9842848c9246494e9266fdaafc433ea4b19b1356c00f4cb0f3c3b6

SHA512
b1934e3e319599fbd3c1a033cf90c16dc193a4bbfe1e3e97a587c51c89ff5a3e26171dd2e62d426c6e1b78a20bba2b941bfd4c7143ba0f2204daef2f2a92c374

Download Submit
/data/data/com.kuaishou.nebula/files/umeng_it.cache
Filesize
32KB

MD5
946a278fd2e6aba7c42b445dfc796640

SHA1
68fbbde8e2873ec2fef9d01f21f088ad9fe20825

SHA256
2db188491af94fb38216ebd8d8541a2b30b1f277d06beae9f44b1efeef5846cd

SHA512
6ed3545b428fdfca7ef139091a1e5e1152f114cf3fbe9bc4fcc67c2e2c164d32e0c67747966762553fdd877e574139cb5dcc7be3abfc16c886a3d577e12bcd22

Download Submit
/data/data/com.kuaishou.nebula/files/umeng_it.cache
Filesize
211B

MD5
5f7bcfa04d7b29e9a47fc29bbe4818fa

SHA1
e60bb89df4ad24894662e0cd2baeced02199a099

SHA256
d705322111e81b5b992f1803f38dbf94d76d4dd9b09a8a54ca9eaa31d3efb554

SHA512
6c441edc34bd23728971959e2734036ef505da92210cb6246a50c386674f2802f71cae8a61d78b59ae032de89420e7aae77eff79bda2f0684f86659cb90a9195

Download Submit
/storage/emulated/0/Android/data/com.kuaishou.nebula/cache/.cache/home_feed_list_7.tmp
Filesize
72KB

MD5
794f57cb334774d42f40fb046054cce7

SHA1
6826e66ccb4b57221b2bf1c47dba6dd8e5cffc52

SHA256
0d7fc07eec261b830c30a0122c0b1cc6884cf1d46ccdd281230f51b154ff8111

SHA512
8b435ce781ce4aa8ea943d35e29702013ffcb043512461f82810411ba03660e4559b7d2ed6f2d2708c39ecd5832276744a3c1597b108b079ad997760b3179360

Download Submit
/storage/emulated/0/Android/data/com.kuaishou.nebula/cache/.cache/hot_pre_fetch.tmp
Filesize
46KB

MD5
908272ff86c22e98ee8a34b40414ce06

SHA1
f5c1a88bbb805f18ddec9108549ed995295f1005

SHA256
0051e432127b37b8ae962aa7cbc7ca83dc88c80b95abe7efffc0f8701ffee540

SHA512
a2b5b1a94cee86c1281918e4969a5b5a2ebd7f92cead56f643231317d7fd0d7cfa3b4f5a398df17cbd6219ceda04a24bd68b027d69e8b51dfd1b9c1daea452de

Download Submit
/storage/emulated/0/Android/data/com.kuaishou.nebula/cache/.cache/journal
Filesize
4KB

MD5
622a3e698e6a661b3a3870ccbb0cc2af

SHA1
a8cf3b078ab3e5253724b5b06e8092e8be2bdef5

SHA256
5268579760cdca76638b98ec90f7d23b9c76446894c7f05c2bfc8834d81043dd

SHA512
9adcd2b6909bf9510c0ad28642c7d8b19a74a9942174e950ebbf0cca94c9169331e359656591ec9f3f20872607afd4d928959beb0d7dcc09bcd5a2f806bd2e74

Download Submit
/storage/emulated/0/Android/data/com.kuaishou.nebula/cache/.cache/journal.tmp
Filesize
114B

MD5
eb3a9c0b845469749fdf86b521c35b3e

SHA1
8a78a121312881fbfb4b44bb0cb368785ac4d096

SHA256
b9b45c578b17b45f88e09824c0d4315e91df534369ec1495bfc98b0d0dfb3b4b

SHA512
73bc41cd9e38bf9382957a5212707b9503be5a2381e3e9255e59f71526fc4fc046001758057375c19d83afe81f028665028fc6d0188a271aad58754c3ba600bd

Download Submit
/storage/emulated/0/Android/data/com.kuaishou.nebula/files/MiPushLog/log1.txt
Filesize
232B

MD5
106e3841c5adb2b7ae0d792c4d8c31b2

SHA1
ed0193d3255d286f268efeeae955d303bdf924ef

SHA256
af2d0a89b965b5e6ad3b2aa003cf3322b5f4baba6dd915fafccc74099146def4

SHA512
32b2b447b1fdbeb1a6ae2d0486b7f2b16310273831776b613a9312c31b84f3802a1ad9377f3541462a39b800f63c32ce0e476655309786f29dbf36eacb978069

Download Submit
/storage/emulated/0/libs/com.kuaishou.nebula.bin
Filesize
78B

MD5
8ce1b25de15dbce30cc794e1a1e8cd1f

SHA1
da19f0aa7856eb37a309cdf4a77862448b5fa74c

SHA256
3a8c3e25c2b8a636403908145b8536939e9763dd61107ff8b380e33504e1784d

SHA512
49626897f848bb6ad4f1076d2361d4a7d3191d4d8aae2ed51826853c21b0735791527ad3654a48155587e4a260621f100403c5f3a4dfa2e44eaebee4c698b76b

Download Submit
/storage/emulated/0/libs/com.kuaishou.nebula.bin
Filesize
78B

MD5
aeb32e68606e7121d7d59feadd6af365

SHA1
9572db158968981aea00820ddb95f1ee50c91471

SHA256
9c01921a82f932ab5be8caf19ae8b3c654ba8554c91e03d43dad7450aecc291a

SHA512
3cd9feafc14fc255d978f86fe3def38bc35c0dbe106d3431747293d1f9a2bca6922ea2780ca28e95c97b03c4e1dfb90f338cf46631773f0593de548e745356f7

Download Submit