4bc330f22919c07e8d7d829cbdad6be254a723b85469613b56a2232db34a4feb

Analysis

max time kernel
6s
max time network
150s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
09/10/2024, 00:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

27ff7b1d734b5f0502a08da06699fc76_JaffaCakes118.apk
Size

12.0MB
MD5

27ff7b1d734b5f0502a08da06699fc76
SHA1

b629faea0c4c33e6780a5ce67ee2a80ab3894bdd
SHA256

4bc330f22919c07e8d7d829cbdad6be254a723b85469613b56a2232db34a4feb
SHA512

5fa28b7c8ff663a9a65a9ce9dc7b44598f7084558f65c2a86fe7961c91735917a78200115d0614f09336fc7fdf93c9cab52530aefe5c30cda83ecc69d68631c9
SSDEEP

196608:w9AWXlWxI18zcLRnA7uhIr+tvonLaPN7ppgUKr4DYGkbw7j1mvLodsZBwKLW/eOc:w9AWXlP18zmnDIrS7PN7pix4D6bKj12X

Score

7^/10

discovery impact persistence

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.baidu.input

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.baidu.input

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.baidu.input

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.baidu.input

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.baidu.input

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.baidu.input

com.baidu.input
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
PID:4242

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.baidu.input/files/0.bcd

Filesize
46KB

MD5
34ffb5d644e5d406b255be5eb333cca6

SHA1
2bfcbad29e55670a12884d5c43410d229a1710c9

SHA256
032a000773c67408899df59985d746e2baca1f8ca81dd72b5cba9cb6ed51a52b

SHA512
0ef7278595e53478a233350619afd945c197b6108514ae30199acbc634e2cdb4617e002e985885d1af63b0a3dd666a855e74b1fe2690c692f948b15e6ecc58cf

Download Submit
/data/data/com.baidu.input/files/1.bcd

Filesize
105KB

MD5
6e7029a469387cf29d2a7deab0463216

SHA1
531a07278ada7b07dec2604fecf9b6d37102a92d

SHA256
9ab97e2891f792e6c934bf68e21c24438a980495ef8c4028c77562bf65363938

SHA512
5a7678615f0d67d9ddba684b2d0286e02d9b5c16f32635936ac7f9e8b488cbeeb763df28f0e72cd57515036814eb621edb96adba2364997dcb82f03fb5989c42

Download Submit
/data/data/com.baidu.input/files/2.bcd

Filesize
77KB

MD5
77c8bfc5367e060b8722632b7eba14d7

SHA1
9b6b65daa9c4ea3632054e170e7a33f69a30acf2

SHA256
17af61c4cee414acf48bceff10e006e14ea8e2bfff4dc3d7a2c81c5ebeb09ef2

SHA512
cd2533fd247bd28d38a4aa7f44b4017671fc37cf09a6f99936772302c4f3c629bd86307a6b533acc11739a794b136d301e83c385af38726740da2d6e4097f694

Download Submit
/data/data/com.baidu.input/files/Ft.bin

Filesize
98KB

MD5
1a8e5c5157224cc3ad63061003cf4a9b

SHA1
49fb4cd6944f511959fc94a08a94383cb954b02c

SHA256
fa5f77ae4f1ab3d67056a0a29df90ac2f6affa1e5a12b03a5a33c56655009a99

SHA512
846ced51f0e2fb43a04722e17df825f7ab63b129a59bc8e5e235a04763e13ff397c073da22ba55ba32532d9cbb6ec3522e91fa9c5cdfa353737084f2a81b1095

Download Submit
/data/data/com.baidu.input/files/Hz.bin

Filesize
101KB

MD5
e33461bd5b7559b1af3dd124d9e8daee

SHA1
9b23c0441f73c2510028b23f434e1e541853f78d

SHA256
ca7938b140ee186dce7de67b50f8992916ef461d32b5e9d271426e104688cc25

SHA512
2c551fe043027f3d765e84af790f087753fe28807c99fc3bfa0a5c3be6a621ba3cdb1d42567005b1c1a0f5cbd7c49629ec35016402ad1549e0dfb9ecc89518f2

Download Submit
/data/data/com.baidu.input/files/Uz2.bin

Filesize
307KB

MD5
dbc3f7f918e44797f243f3b4d5173436

SHA1
17bd8ddf73ad4a9a0d9be6deb7e97bcde6228a11

SHA256
6d1f7a7e5cde4f847d5a14382102733a707593190ba7750af674eb6b49ba2606

SHA512
6515d13965e5a9c529ec4f4d4b4bf061fbe1156f8cfac67911ba20529afb11a451dd68cf5d21e5afb9c86e9c95f93690494d1c6541a470d21b6c7e8dcc3c27f5

Download Submit
/data/data/com.baidu.input/files/Uz2.bin

Filesize
12KB

MD5
dfcf591c31167f1a17490ffde45eb46a

SHA1
1af537afbbc8424dcbb8c5031d45e7226530eff1

SHA256
cddb10b1eff83b43a0840f8a3eae0d7adda619b6270b5db96880c1914300d742

SHA512
b6f4c511a8c83d3fd4e7fc1b2052280445727975a3727b5eea951f2c5e32244afc618911c00107f1c7923f86cf11ee2b17ab4e1656e3d1b07fe04cb14cb787a1

Download Submit
/data/data/com.baidu.input/files/Wb.bin

Filesize
122KB

MD5
3b67bf2d20c1934ab5dba546575ccb56

SHA1
b361763e9555411a573e268551ae8dedb3658c90

SHA256
6c781ae60fd9f147268de8f8788523f762aed6c505f7600d7f11adde8c8d3b78

SHA512
5c0f394a80714f07943be2e1326577c04d7b68e31f1c5f4ed901c28fd776ffe2a59518a95e75089620305e4bb54a9d1dbb8969095102e79fe2ffa1cd91c47ee7

Download Submit
/data/data/com.baidu.input/files/Wb98.bin

Filesize
122KB

MD5
76bada960b76a4931fbcbb37880037b2

SHA1
40166d2f203ddc0ec9d77102792bf7f208568e27

SHA256
3f13b1140e1ff84ee9d2534bfd61b5e2b62d4de3d83f4f82e2dec5e627b59399

SHA512
5c999bac3fdf56aea486bfbed39d5d5b96c526e607344ef59dce8445183a6210cb8b0a22531a40edeacade3cc9ee8260d19279d1279bcf88823cedec57fb8c8c

Download Submit
/data/data/com.baidu.input/files/bh2.bin

Filesize
218KB

MD5
b1f9655f6708e9eca328dc6c54a87948

SHA1
8871a3d080a53c45cba2235215cc5db32726c86e

SHA256
11bc912fb5833f0dc0e5235a63f4342d172e07e892c1b039be4b914a4fb395fd

SHA512
6dc4d180926fadbfaa15d9319edcb3211dd47167ba2811ce4782edd0fc277527310e5029f6f19a878db86c3ef0f8b3f2cdade4c799ac6c167401d741639d448c

Download Submit
/data/data/com.baidu.input/files/ch_cor2.bin

Filesize
11KB

MD5
a134804c5c92a2ba494ae4d74e292e68

SHA1
a17cd75fa517329e1f779ad93e87268b47a7b6df

SHA256
4fbce457a9884d1ef39e1162b4ab7b3a1f74d2b5e54ed166e0c222a2ff486f11

SHA512
8d0d9dacef57a0ed66d858a0f2aff96d227085e3be89e4d59c05636f7178ed9d8374450d8f0f457d742279f2811a793f790d91b56619afe41b4947ab57e50a56

Download Submit
/data/data/com.baidu.input/files/channel

Filesize
5B

MD5
9099308ccbd32bbafb837adb89eda12c

SHA1
18aab6294911155f865444a703bf95c37579be82

SHA256
dec284c298faa49df0dc7fbf73ab20e5c8108eeaefeb99fe6ea891c6572c37c2

SHA512
6f08f27780ff79af0904a30e351bb45b36b30e74932acf65828ea54d8295d7cc6cc3b61a118ecdd7700b9b9a8cf3fb6c803f0f8637ec1bcea58f2c3b5686eb8d

Download Submit
/data/data/com.baidu.input/files/emoji.kwd

Filesize
20KB

MD5
b52385f2f9c3c9764dd1d6cddf6aa8a4

SHA1
77b58291b91c67b030df5349bf0d25db936e8e9d

SHA256
ec7e24035cc4008f43184d44f34e10d55ed7ba432240ac14cc10ff220cbdafc3

SHA512
5ae78c1de99b45c52a6fdc13749bc073440441e699ace571e2a881321b316cec37b804ccab4102fd7879fc1ddc23612adf1d3cf132cb3bfde5d59dfb9e155f48

Download Submit
/data/data/com.baidu.input/files/emojiextend.kwd

Filesize
5KB

MD5
6bb3a42196cd47e39ab738fbe7f08de7

SHA1
58595ebb23a223b6f5e9c035ab8d7b6e7abbca2a

SHA256
212509c35c3434b8c910b1824eab5f9a5234d6ade32564dade87f26197002c5e

SHA512
1204912620ab847943bd7a836669d57c7f3c9c14124d09eceb9efb460502e534db0e59bb39c46ffe3ae99a1dc0cc185d75f339df67dbd77ef967b8c967d0473f

Download Submit
/data/data/com.baidu.input/files/en2.bin

Filesize
196KB

MD5
98214897ef1db5f1d7c2f05a9d5adc2c

SHA1
ae8b5a39019bf292ee30b07711582cfc3cbedfcd

SHA256
dcad6cdc5326416da0c91a3b2a41e51eacf0001bb76091307c4e62ae320a3d88

SHA512
8b4d2f10ec35eb91c7329d9c20d11ea1a9edc5b1e7f89504fb5ffb207a2dddf60055bc8aa8607f6d896933191d674af51d25e48d26f1a6fa22b7cf651c8b87cd

Download Submit
/data/data/com.baidu.input/files/fast_input.kwd

Filesize
1KB

MD5
7233d409069a872ee875b7aa60c58039

SHA1
27194f73a185e3b932fe7d68575b465c7a4678b2

SHA256
f169e170af7dcbc34247320b67c5a60136d5d2d7e3f5df03cd5262e067b32f3a

SHA512
8a4e5579aaa24bb19d30bfdeb140c77491d209c0e0f9d8d7cfc22c4c90e1e3295e44f6de8ca9275ab2d1ac93208da8eba2e69f6c4c5400ece65563eabf3c5c5d

Download Submit
/data/data/com.baidu.input/files/hz_label.bin

Filesize
19KB

MD5
ec52fc59abaadb0f8e8acfdae294fbbb

SHA1
706f2011818e0cf5027af8c69ac2cbe434cab76a

SHA256
fc6ed82ee5f8f2b5ebe1ff3c4f5d477d7dcd10a546c41b827d2b36bf41991bd2

SHA512
86ae487ba6cd451719a110743515e25a5db55c71da50395be75b2e7bf0fdfd362b0ddecd9bb0a982ead1091e66b057cfb9c566cf42804e7e6c7ca037333d6fad

Download Submit
/data/data/com.baidu.input/files/idmap.bin

Filesize
96B

MD5
fe08d6d98211bd0167cd786ff620d8e4

SHA1
14a2bf4d7b66da9d934dcfa7d6d2a1cf06ef0482

SHA256
21837494350a79cd1e5461c2906ada69a9d8e21ffb5db2c7e629c2cdbcefd68b

SHA512
9afdd8ead06448d0c21dc2f0346d0e3d8b95c90087193506624ce29bf4a613af82ecd55f89af48908c70b64eb1f782035b0d92720faa68655b663e7cd02a8be3

Download Submit
/data/data/com.baidu.input/files/idmap.bin

Filesize
29KB

MD5
ba7601ac7d5220266f3890024bcec325

SHA1
cc94dca91adac994912bb4c808b9a701b76d2044

SHA256
7f7fd106ed6f21ae86e17acac0e71d6b7bc379aeb527161a598aa96f13c21968

SHA512
903e48b7fbbddfae9a526cb7e27eba1cc6b7d88813e14f8d2c1eb4a4ec0d878c8ce082469fe64dd5b09f66ca7a5917d7a8a108308c7d2fa916399aa486bf93ee

Download Submit
/data/data/com.baidu.input/files/inputcore_20160219

Filesize
639KB

MD5
2299b011ad7b6d8f57e71f6d4c8301d6

SHA1
34701dade6cef43d88ddede86308275b1140a3c5

SHA256
9601a0347f22b55c0fc0edb2b42f76cc82b57aad5f4d3b7499833055b8601edb

SHA512
39e980a943394cd99f3ad5ec167f8755b4a952f91ef9dced5e7e76f021a20dcc9202769a059e7dc3b529749a26d5423ebc0ebd270ed2cff6b24b5e2e3b090cf9

Download Submit
/data/data/com.baidu.input/files/iptwt_20151202.bin

Filesize
2.9MB

MD5
5e412f86c7d2ac7ccbcbd110c594f25b

SHA1
76951a38be6fcf26229d9180862f5e5669baa4d1

SHA256
620b443b05f0987704360583b90d1e7079d6f9c568b3d9473f3c5ce06ea6a715

SHA512
3d5b23fcf7e9abe68b973f5c3aea6d25cf001ff97fe5d173c237f9a7cb013ee5d94c609c36c6743366818595ef9066bd04ccc34702a92da3f29d867ade477f48

Download Submit
/data/data/com.baidu.input/files/keyword.bin

Filesize
476KB

MD5
e1d6b48a2ebbc5565a731066cfc82c8f

SHA1
60d3916f455144a5c4c294cba5c0d723c9221e55

SHA256
875dbc2b80ca1fd404e7abb1085accf0573ee5c6427e206a62ab35ae848e7c06

SHA512
5b84f04da3a804b986dd637b396c1ea3a9bc14e0ba65dcc763ce082462943bac852587a5cd8a8b39056c84294e4a152043d2168351aedeb18572c917a9c4b80c

Download Submit
/data/data/com.baidu.input/files/kp.bin

Filesize
50KB

MD5
4a90d5d7c6d5802100794cb91293a4f4

SHA1
6ec9dce3c17ba4cbbe0e1484beaef6bb53fe5432

SHA256
09a2dbb4ff8555a9d5a6cceb014533841e65c9a18296d1a93a3d50fe1fb8108b

SHA512
43a268ba607d40048890c8d5e39cea7bef2d8f2afd3dbd6407bb376ed2cd756dcdf3030dd9df1e4f7a4edb35cbb427215e2c47c536a70a1d8759cfd60e7e63a6

Download Submit
/data/data/com.baidu.input/files/log

Filesize
2KB

MD5
f4245de2567c720ff30ef7720a645198

SHA1
963aced72b4ac79310db0a156fbbb13969633da3

SHA256
def145031aef4d9290370c79222968a913b5a729988cc7ce67d4d151b85ca8fb

SHA512
598fa8f6f1bff11bb7d132000d54080511ccb3720ef757f619764bccc450c1e14b53370457f8de0cac1c9d217c55b66b489fcb3d92b7ecba9b00b72071e7e5d5

Download Submit
/data/data/com.baidu.input/files/log

Filesize
2KB

MD5
1c4d8cf2208e47d12261685caadcfd6e

SHA1
b79755b56f5f03c5b928eaa4dc566ba2de2c480a

SHA256
52106221cf4b0e91f50ebd97b0cb59843701590961e14fd9c1764b71457e993b

SHA512
9e6158376b37decd9ab66e98b0ba80eb090334bad9caafd31f5ed5056ba30bf4dde945d6ba5983299d22c9bce650f3229267d9c5a5b740e99463c80169b3cec4

Download Submit
/data/data/com.baidu.input/files/log

Filesize
2KB

MD5
d3791d34fb75702e37e64b55f75ae4f4

SHA1
5703a9971b63a8a4c5dfaf20246f59fc7b0dfcfa

SHA256
27d45cce94e97c0fb900417ba18753f7473291bb11cdaded7bce866f25091851

SHA512
ea55f06001dfee286b63d91a67bab2a00641bb7b034d14d2d9dbd4d41e441b39cc18dd5d7e7c576784d8b364ae076a9d3aab38fd4588cb29a538a137ec9e15d3

Download Submit
/data/data/com.baidu.input/files/log

Filesize
2KB

MD5
8664817516870d4c1f09651445ceb08b

SHA1
c8900faf55be4c90aef4f711a780f9b7c0fbbb0c

SHA256
5d91304377b56e13ca669d086ca83fa5db5b80fd77d26937cb6b2a409e9444ee

SHA512
f017da8ccc5999432b5e0cbbc1237dcf50db1f8c1ce74afa84b9eec80df18dd2af71ee3c0f60de2ab5791c13712fb0473902c832d59e640c660d6f8c4e1a6502

Download Submit
/data/data/com.baidu.input/files/log

Filesize
2KB

MD5
77ae6a0d927febcaa972647d1f6095fb

SHA1
933f7fe0e7d38e642db098dedd3f5fffbd7d85be

SHA256
30eacf0d345e3f875bf711cc6d104a9ce681d915e80d6bdf7bcf2d24360d2800

SHA512
df9593c3027d29a471f129d0b5d1a0ebbecff9d1b2a60839f03f48f6846f586aac550aa93c0e53fd8f52f28492c8aea22a146d60ae7535f9f6557fc648f6149f

Download Submit
/data/data/com.baidu.input/files/media.kwd

Filesize
2KB

MD5
1f08b4a27cc47672d6351ef5ee1a0420

SHA1
a0c1ccf1fe7163b03bd49fd44e1b79fd9b68f88f

SHA256
9c032ecbad065e824d13b5790224a1f26b48689e3ab096dad5749e5db82d3619

SHA512
924d4e9d1220a63b8b83342972c4777332202e6fd9eb116609dd89b75c39fa0809d7fb8283155f309675e4db27b9a09271ad067849f73c3960243deac1010092

Download Submit
/data/data/com.baidu.input/files/phrase.bin

Filesize
6KB

MD5
a0afd0bc5347f425b97f040fed946cf9

SHA1
37bee23a0b541e4fb3fd6c7bfaa567bc8123d64b

SHA256
d080e20236ac95297245a391d9611609983065b93d9c20d2a7f7a1a03e69986c

SHA512
b9d15b9c0a01e8019cd91efe649e2e0b5a2946110a69d24fce92c695f1707e6ac32aec70be384725a86b8a6f7f4737aca684d50f6db9a2a85cb162e3636aacf2

Download Submit
/data/data/com.baidu.input/files/phrase.bin

Filesize
6KB

MD5
f470754295da8d8cabf312d7e2742445

SHA1
3fca6f6b9823b4ba00699fdf12852aaddd6de725

SHA256
423438c14e46423f8f9b90027fa8d9fa9a8bb2fbceaae073265db287685aae09

SHA512
6ae2e8a349ca5a96a28f9ea4254dc08f22c7e8f64ed5af7fa309cd4aa9c6739a35bd2c55fbef01898277cf6db066afa7bb292bbc3b75ec7688694e06ee575b77

Download Submit
/data/data/com.baidu.input/files/phrase_plus.ini

Filesize
428B

MD5
2c4b981462b6acd1381d735dd7e3084e

SHA1
9631ba998aba3c1341dabcbe75623bde72eb39a6

SHA256
efa226fef1098da5d16fefcdca2f5b8aafa9bf112094cdb2ad6ebbfb1cdb9c48

SHA512
8b913d7eb4e9f2b4d7064237b431ee7e971595f0aa762cfcf2b4e77fee9acd235953406cfa28ae24ab465883f8e8381424fb8dafc5aadca1e0a4ac3a2a97829a

Download Submit
/data/data/com.baidu.input/files/setting

Filesize
3KB

MD5
25c71d91a2d23e65b9ded3240c089bce

SHA1
ad763a77e0088fedc51f11aaf1ef1fda1c19f4f5

SHA256
65a3708c96ff7a471b74d7b677ffa49aacd966462fa696827e691931d7094d3e

SHA512
4f63c2a31443d5c20e7f2ba4a56fb5b4f69bdd6b69829ee6941ecdfcbe73eea176f2812d6bb27241d3ea4c6d0612883b37a2924ec0db5524286819b632be6b25

Download Submit
/data/data/com.baidu.input/files/setting

Filesize
3KB

MD5
4f390e671006528b62b488ca15315826

SHA1
ad14b2b2feb3e243591acc1035ad776ff0b3da81

SHA256
8917156582ae866a73f348382204b9b27db8bf97e6d106a3b99f4840b37ab23d

SHA512
a7a61dd19b355cf5dd6e280819131b2e51b3a745585c2e4b4ae84de581040796ab5ebdd75cb636259d10a4e4397b160cbfd90a26613bc49f15ed116b8e2e608b

Download Submit
/data/data/com.baidu.input/files/sp26.ini

Filesize
364B

MD5
773ba0ff42847b89b845e00fa04a401f

SHA1
76857b5c1dabc6a52f5ae51f9c90bd0f947fd131

SHA256
33b9a4d3ab47c32319f237b0c3f168123106a88f5b8365afb1534d6f2e1217e9

SHA512
93cfa179ed02e6db50b3e77a4e1b73b60f802b6db44f17549e6f70769aecdec29bb3e166276827b2a0244d813c453541ec40d08137e064b3cc608f615843ec3f

Download Submit
/data/data/com.baidu.input/files/sym2.bin

Filesize
17KB

MD5
9364a756b5d95dd36b4444fa56e4a37e

SHA1
7feee0b4b7ba9f7238ce8af92ee74013328e0dfe

SHA256
8379460fcf6bed5b332840332ec8d3483266fc755397055c2844b4d60aee8df0

SHA512
4caf8d4cfb25067a6ac4b68b74d57f229f649068c83bd1b9dea491245508c05d253a12bdd4f035ea1b026b0e4f5fd2f25ad7bac616d3b45d67fca1b0afac7cf2

Download Submit
/data/data/com.baidu.input/files/sym_cell_id

Filesize
1B

MD5
1679091c5a880faf6fb5e6087eb1b2dc

SHA1
c1dfd96eea8cc2b62785275bca38ac261256e278

SHA256
e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683

SHA512
3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40

Download Submit
/data/data/com.baidu.input/files/symcc

Filesize
281B

MD5
648fb20909dcb0a498acbe125cbf5925

SHA1
191f87015fedb784ff2d1e0704fa26f48be6f2d3

SHA256
cbb40bfeb126acee028a463581841be12945fd5dde9334ac5f91bec9688b79c2

SHA512
15555c57e34f9629dd20e893166138fdd6a56440bf515e859075d25bfc567b67c3fa398e1c0cfc7561fd7abfd7d72d7a868b34bedc9b76767eecafc08af884df

Download Submit
/data/data/com.baidu.input/files/syml.bin

Filesize
7KB

MD5
40564631d6c3ea9883a628620f269cba

SHA1
722dc60e4e21b82f70d3b80bc8b33511c847dd19

SHA256
ed1fe306803df2f4ac41e3f8fcc06f09e585056b83e7bd7c938a3f1ebae752f1

SHA512
55865294e71b0c2264dab039c27e0ddc10ff1149c0f6c7d59c5b08cdfc77e078778e95273707b31d0e89d1fb82c5f9ff67ecbd5e54167b2d423dd9f2743baff8

Download Submit
/data/data/com.baidu.input/files/ue2.bin

Filesize
2KB

MD5
c47d62bb44a2eec6c8c6dac19fbf6f5b

SHA1
ed73d9921cab0a2b90c8a2ba17df4122dd5fa969

SHA256
5b15d6133508dba29c023713161072f150fe5f3a0425719302486b6ab9a76e59

SHA512
f900b4e2fef6275fd7ef600b43dc5a861820d0a2dfd6550ed7683c9159cc9df96f8bb9836b47ed8942c9ed3860dea2bcdf18adf9012308c63c482603f6acf760

Download Submit
/data/data/com.baidu.input/files/xhy.bin

Filesize
123KB

MD5
5b99a41fb46919f825dd46897c51e4d0

SHA1
a328d2eccceb56b3206f72f6cc89d541eec715f5

SHA256
829d1daf7d29e5df34b735426a093cdbd7f035a388014814d3cc5742a4154dc3

SHA512
88af4e6c4d0245767f122e4569fb7dffe5a3656c86ddf128622d99229b071be42e65a5391063cbaf54d6a9c36ee1637831202eb84b6aedddc4bda7c69dca31c6

Download Submit
/data/data/com.baidu.input/files/yan.idm

Filesize
20KB

MD5
8314544f19f1a8aece13f2d606fb7bc1

SHA1
b56e9ee84dc525997708e5313e67e6cbe5b0e7f0

SHA256
7761c17f1e608ff9536edb9c4dd254ea0e2ffbdf0a66e85a62d30ccbc568d594

SHA512
6130215179162ba0940edb6c27724d7149d3050612774012808ffbf86b07d32e22ec0e5c72825c0542ffc9ee37fc00eb2d759abda793148fec8ace719035fe5b

Download Submit
/data/data/com.baidu.input/files/yan.kwd

Filesize
82KB

MD5
6695a29668346828f5ac343ff7cd66f7

SHA1
417865cea812f6a34451c5031d01385f8f3050c9

SHA256
104ec7c56f2260a88f34381c7ad91f53a60984c05720f8f2416f49969662e8b7

SHA512
d61177475e6ef6bdb94723eceed638cfbd2c6f781e8ef0dffb82ec5fa80a166180e46bef9f0b66292fad6f1a49f72b1fa684a0866fbd6e3c51d734cc13c99e47

Download Submit
/data/data/com.baidu.input/files/zdh.kwd

Filesize
109KB

MD5
8451bca624d39137c761872c1e7a0f7c

SHA1
9b5e242760fed81832901d07c74834c05c98981d

SHA256
92b926147e13973c28469fef188a2eca18b06f6e5f760e83ff7aa5143a6ccc27

SHA512
05dbeb13b0fc5eb7339ac4b42dec9ca213cccccdd4477b813c87cfd57e0963ccb72cbb7c5c774b3fd6c2b28488313d99a8853f1127c8ebfbdc30d19854413b51

Download Submit
/storage/emulated/0/Android/data/com.baidu.input/cache/StoreSkin/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/baidu/.cuid

Filesize
89B

MD5
c7a6c0d07988b6563865716730ffdbef

SHA1
ad89476702c774df59245accf03bf9f22cf9a02a

SHA256
002259bd445f58a27655c9ab671e4eedda2e3e9d7a47dba0f722e2123f3efea9

SHA512
ba9e6afb4d3e6014a64741f3ddc76b91cd6ef1448bc6d12c54785819babd10619316305ffde2a888f8c778a788c9128e66d22e1cd64db6627f853fc89d8c64b2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads