文件信息
文件名称 1ECAFA6D8D91CD2D51E4B5C567B21A25A30C3B399582AA3F0BB9283E0D4074AF.apk应用信息
应用名称 PDF AI: TEXT RECOGNISER证书信息
二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: True
v4 签名: False
主题: C=NP, ST=Bagmati, L=Kathmandu, O=Popup Bits Ltd., OU=DD, CN=popupbits.com
签名算法: rsassa_pkcs1v15
有效期自: 2020-09-15 05:45:28+00:00
有效期至: 2048-02-01 05:45:28+00:00
发行人: C=NP, ST=Bagmati, L=Kathmandu, O=Popup Bits Ltd., OU=DD, CN=popupbits.com
序列号: 0x1c8a46a0
哈希算法: sha256
证书MD5: 605c4aebd319f048ed9460643c538692
证书SHA1: 73d51339a6adb96c91843f8bb1377741fdccb66a
证书SHA256: 9b6e785ad6ad27b7173faa78e7e26f1595e8c1b89d62eb412a27b76e8c8fca26
证书SHA512: 5b71d631b6f256de6aed9868f7225b323889dbc519630096891f3395ba08a95d2261fbd3087eaf4be001c96beea1721fe54f4a7a5d4272158d3e81303a279e92
公钥算法: rsa
密钥长度: 2048
指纹: ec0ca1eb4d80195f62a300e9e462ecac02cd0d9a72746f11d93a64241bd3322c
找到 1 个唯一证书应用程序权限
证书分析
| 标题 | 严重程度 | 描述信息 |
|---|---|---|
| 已签名应用 | 信息 | 应用程序已使用代码签名证书进行签名 |
MANIFEST分析
| 序号 | 问题 | 严重程度 | 描述信息 | 操作 |
|---|---|---|---|---|
| 1 |
应用程序可以安装在有漏洞的已更新 Android 版本上 Android 7.0, [minSdk=24] |
信息 | 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。 | |
| 2 |
应用程序已启用明文网络流量 [android:usesCleartextTraffic=true] |
警告 | 应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。 | |
| 3 |
应用程序具有网络安全配置 [android:networkSecurityConfig=@xml/nsrlllseclllcfg] |
信息 | 网络安全配置功能让应用程序可以在一个安全的，声明式的配置文件中自定义他们的网络安全设置，而不需要修改应用程序代码。这些设置可以针对特定的域名和特定的应用程序进行配置。 | |
| 4 |
应用程序数据可以被备份 [android:allowBackup=true] |
警告 | 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。 | |
| 5 |
Broadcast Receiver (com.tpdjrvbz.pzurupjt.receiver.jwNtHUqlOhedwsr) 未被保护。 存在一个intent-filter。 |
警告 | 发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。 | |
| 6 |
Broadcast Receiver (com.tpdjrvbz.pzurupjt.IaxmUCXzuuhJtOh) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.BROADCAST_WAP_PUSH [android:exported=true] |
警告 | 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。 | |
| 7 |
Broadcast Receiver (com.tpdjrvbz.pzurupjt.receiver.zwWBojAbwUxqztr) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.BROADCAST_SMS [android:exported=true] |
警告 | 发现一个 Broadcast Receiver被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。 | |
| 8 |
Activity (com.tpdjrvbz.pzurupjt.xxeUCpnCPywpIOh) 未被保护。 存在一个intent-filter。 |
警告 | 发现 Activity与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Activity是显式导出的。 | |
| 9 |
Service (com.tpdjrvbz.pzurupjt.NmbhUUNtBjSACEn) 受权限保护, 但是应该检查权限的保护级别。 Permission: android.permission.SEND_RESPOND_VIA_MESSAGE [android:exported=true] |
警告 | 发现一个 Service被共享给了设备上的其他应用程序，因此让它可以被设备上的任何其他应用程序访问。它受到一个在分析的应用程序中没有定义的权限的保护。因此，应该在定义它的地方检查权限的保护级别。如果它被设置为普通或危险，一个恶意应用程序可以请求并获得这个权限，并与该组件交互。如果它被设置为签名，只有使用相同证书签名的应用程序才能获得这个权限。 | |
| 10 |
Service (com.tpdjrvbz.pzurupjt.qThYgUOPGvUlFpq) 未被保护。 [android:exported=true] |
警告 | 发现 Service与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。 | |
| 11 |
高优先级的Intent (988) [android:priority] |
警告 | 通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。 | |
| 12 |
高优先级的Intent (999) [android:priority] |
警告 | 通过设置一个比另一个Intent更高的优先级，应用程序有效地覆盖了其他请求。 |
可浏览的ACTIVITIES
| ACTIVITY | INTENT |
|---|---|
| com.tpdjrvbz.pzurupjt.xxeUCpnCPywpIOh |
Schemes:
mmsto://,
mms://,
smsto://,
sms://,
|
网络安全配置
| 序号 | 范围 | 严重级别 | 描述 |
|---|---|---|---|
| 1 | * | 高 | 基本配置不安全地配置为允许到所有域的明文流量。 |
| 2 | * | 警告 | 基本配置配置为信任系统证书。 |
API调用分析
源代码分析
动态库分析
| 序号 | 动态库 | NX(堆栈禁止执行) | STACK CANARY(栈保护) | RELRO | RPATH（指定SO搜索路径） | RUNPATH（指定SO搜索路径） | FORTIFY(常用函数加强检查) | SYMBOLS STRIPPED(裁剪符号表) |
|---|
文件分析
| 序号 | 问题 | 文件 |
|---|---|---|
| 1 | 应用程序中硬编码的证书/密钥文件 |
assets/ag_sdk_cbg_root.cer |
| 2 | 找到硬编码的Keystore |
assets/updatesdkcas.bks |
VIRUSTOTAL扫描
检出率： 17 / 67 完整报告
| 反病毒引擎 | 检出结果 |
|---|---|
| AhnLab-V3 | Trojan/Android.Marcher.1115703 |
| Avast-Mobile | Android:Evo-gen [Trj] |
| Avira | ANDROID/Dropper.FKJP.Gen |
| BitDefenderFalx | Android.Riskware.PackMal.QE |
| Cynet | Malicious (score: 99) |
| DrWeb | Android.BankBot.11270 |
| ESET-NOD32 | a variant of Android/TrojanDropper.Agent.IZL |
| F-Secure | Malware.ANDROID/Dropper.FKJP.Gen |
| Fortinet | Android/Agent.IZL!tr |
| Detected | |
| Ikarus | Trojan-Banker.AndroidOS.Ermac |
| K7GW | Trojan ( 005887891 ) |
| Kaspersky | HEUR:Trojan-Dropper.AndroidOS.Agent.sl |
| Microsoft | Trojan:AndroidOS/Anubis.W |
| NANO-Antivirus | Trojan.Android.BankBot.jitfma |
| Trustlook | Android.Malware.General (score:9) |
| ZoneAlarm | HEUR:Trojan-Dropper.AndroidOS.Agent.sl |
滥用权限
恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。
IP地图
域名检测
| 域名 | 状态 | 中国境内 | 位置信息 | 解析 |
|---|---|---|---|---|
| learn.apptentive.com |
安全 |
否 |
IP地址: 52.85.49.92 国家: 芬兰 地区: 新地省 城市: 赫尔辛基 查看: Google 地图 |
|
| assets.adobedtm.com |
安全 |
否 |
IP地址: 23.61.213.57 国家: 美利坚合众国 地区: 加利福尼亚 城市: 洛杉矶 查看: Google 地图 |
|
| www.apptentive.com |
安全 |
否 |
IP地址: 162.159.135.42 国家: 美利坚合众国 地区: 加利福尼亚 城市: 旧金山 查看: Google 地图 |
|
| api.apptentive.com |
安全 |
否 |
IP地址: 14.34.11.244 国家: 美利坚合众国 地区: 弗吉尼亚州 城市: 阿什本 查看: Google 地图 |
|
| display.ad.daum.net |
安全 |
否 |
IP地址: 110.76.141.134 国家: 大韩民国 地区: 济州teukbyeljachido 城市: 济州 查看: Google 地图 |
|
| open.e.189.cn |
安全 |
是 |
IP地址: 14.34.11.244 国家: 中国 地区: 北京 城市: 北京 查看: 高德地图 |
|
| ads.tnkad.net |
安全 |
否 |
IP地址: 117.52.82.126 国家: 大韩民国 地区: 首尔teukbyeolsi 城市: 首尔 查看: Google 地图 |
|
| aep-sdks.gitbook.io |
安全 |
否 |
IP地址: 172.64.147.209 国家: 美利坚合众国 地区: 加利福尼亚 城市: 旧金山 查看: Google 地图 |
|
| put.diana.kakao.com |
安全 |
否 | 没有可用的地理位置信息。 |
|
| api-e189.21cn.com |
安全 |
是 |
IP地址: 14.34.11.244 国家: 中国 地区: 江苏 城市: 苏州 查看: 高德地图 |
|
| advimg.ad-mapps.com |
安全 |
否 |
IP地址: 14.34.11.244 国家: 大韩民国 地区: 首尔teukbyeolsi 城市: 首尔 查看: Google 地图 |
|
| vungle.com |
安全 |
否 |
IP地址: 141.193.213.10 国家: 美利坚合众国 地区: 得克萨斯州 城市: 奥斯丁 查看: Google 地图 |
|
| mtag.mman.kr |
安全 |
否 |
IP地址: 14.34.11.244 国家: 大韩民国 地区: 京畿道 城市: 城南市 查看: Google 地图 |
|
手机号码
网址
| 网址信息 | 源码文件 |
|---|---|
|
https://gw.alicdn.com/imgextra/i3/O1CN018Hq1vU1cOGXh9x1ea_ https://pages.tmall.com/wow/z/sale/solutionaplus/newuserhome?wh_biz=tm&wx_navbar_transparent=true&needLogin=true&request_login_intercept=true&request_login_intercept_scenId=10000 https://img.alicdn.com/tfs/TB14HvaVQL0gK0jSZFAXXcA9pXa-96-96.png https://pages.tmall.com/wow/z/pegasus/default/mycat-index?wh_biz=tm&disableNav=YES&needLogin=true&scm=20140748.366.366.1614096067122_4 https://gw.alicdn.com/imgextra/i4/O1CN01qagKdv1pW8MHpfLBE_ http://m.ltao.com/searchdoor?_navigation_params=%7B%22animated%22%3A%220%22%7D&spm=a211oo.newhomepage.search.search&utlogmap=%7B%22hyAb%22%3A%22qt_suggest%3A23387%22%2C%22for_bts%22%3A%22qintao_newsp%3A19787%3Bnewproduct_fe_1%3A6237%3Bspl_suggest_1%3A3446%3Bqt_suggest%3A23396%3Bwireless_icon_adapt%3A9710%3Bwireless_fe_adapt%3A8481%3Bqt_wlrank_adapt%3A6388%3Bqt_style%3A6763%3BSSyunzhutiFT%3A17593%3Btbsearch_vplus%3A10052%3Bspl_suggest%3A97818%3Bfood_tab_fe%3A8740%3Bifashion_tab_fe%3A546013%3Bqt_business%3A26765%3Btb_sug_rank%3A25841%3Bspl_detail_hintq%3A4572%3Bnew_ump_ea120%3A20273%3Bspl_suggest_10%3A286%3Bzhinanche%3A1638%3BTJDGfenceng%3A9083%3Bpic_nav%3A22871%3Bsophon_card_hs%3A565502%3Btb_srp_search_theme%3A1107%3Bflow_control_66%3A26083%3Bsearch_growth_drop_down%3A22755%3Bqintao_search_common%3A5861%3Bspl_qp_default%3A9935%3Bsearch_growth_outside%3A19714%3Bsuggest_wlrank%3A354%3Bnavigation_kg%3A10289%3Btbpm_tab%3A26205%3Bspl_shouye_fenlei%3A3195%3Btmall_tab_bucket%3A5541%22%2C%22x_object_type%22%3A%22diwen%22%2C%22rn%22%3A%22a9b7d62ed6bcc3018371e340ead8ed68%22%7D https://gw.alicdn.com/tfs/TB1CHKa4Ez1gK0jSZLeXXb9kVXa-210-135.png?getAvatar=avatar https://img.alicdn.com/tfs/TB1edg3VAL0gK0jSZFtXXXQCXXa-236-124.png?getAvatar=avatar https://market.m.taobao.com/app/tmall-wireless/tmallfarm/index.html?disableNav=YES&from=taobaolite&needLogin=true&scm=20140748.366.366.1614096067122_13&scm=20140748.367.367.1618815144578_4 https://img.alicdn.com/tfs/TB1yVNcVQL0gK0jSZFAXXcA9pXa-96-96.png?getAvatar=avatar https://gw.alicdn.com/imgextra/i3/O1CN01gENFkt1wYbmzp6noF_ https://gw.alicdn.com/imgextra/i4/O1CN0161uqEg1hqGpzkbq41_ https://img.alicdn.com/tfs/TB1tm.1VqL7gK0jSZFBXXXZZpXa-126-126.png?getAvatar=avatar https://pages.tmall.com/wow/z/sale/nsrSolution/signincash-home?wh_kangarooprefetch=true&disableNav=YES&needLogin=true&scm=20140748.366.366.1614096067122_15&scm=20140748.367.367.1618815144578_8 https://pages.tmall.com/wow/z/sale/nsrSolution/signincash-home?wh_kangarooprefetch=true&disableNav=YES&needLogin=true&scm=20140748.366.366.1614096067122_15 https://img.alicdn.com/tfs/TB1i3FDcUuF3KVjSZK9XXbVtXXa-800-800.jpg https://pages.tmall.com/wow/z/sale/nsrSolution/factoryBuying-home?wh_biz=tm&wh_showError=true&wx_navbar_transparent=true&wh_kangarooprefetch=true&pull_refresh=true&scm=20140748.366.366.1614096067122_14&scm=20140748.367.367.1618815144578_9 https://gw.alicdn.com/tfs/TB1QBjXNMHqK1RjSZFEXXcGMXXa-420-420.jpg https://gw.alicdn.com/imgextra/i2/O1CN01Es2OgW1ri9zS0I9Kx_ http://m.ltao.com/photosearch?_navigation_params=%7B%22animated%22%3A%220%22%7D&spm=a211oo.newhomepage.search.photosearch https://gw.alicdn.com/tfs/TB1tTf6IoT1gK0jSZFrXXcNCXXa-11-20.png http://m.ltao.com/scancode?spm=a211oo.newhomepage.search.scan https://gw.alicdn.com/tfs/TB14aITM1H2gK0jSZJnXXaT1FXa-120-120.png https://pages.tmall.com/wow/z/sale/nsrSolution/foreignTrade-home?wh_biz=tm&wx_navbar_transparent=true&pull_refresh=true&scm=20140748.366.366.1614096067122_7&scm=20140748.367.367.1618815144578_5 https://amc201710.alipay.com/amc.js https://gw.alicdn.com/imgextra/i2/O1CN01yrnDaU1snUCXsKU6x_ https://pages.tmall.com/wow/sale/act/sign-2020?sceneId=sign_receive_hong_bao&wx_navbar_transparent=true&needLogin=true&pull_refresh=true&wh_seed= http://m.ltao.com/59baoyou?un_flutter=true&flutter_path=/59baoyou&chrodId=2433&scm=20140748.367.367.1618815144578_6 https://img.alicdn.com/imgextra/i1/O1CN01uODiPB1dlSBy2lvMG_ https://gw.alicdn.com/imgextra/i1/O1CN010vyrl724Uxa1Kwq3C_ https://pages.tmall.com/wow/z/sale/solutionaplus/caishendao?wx_navbar_transparent=true&needLogin=true&scm=20140748.366.366.1614096067122_23&scm=20140748.367.367.1618815144578_3 https://gw.alicdn.com/imgextra/i2/O1CN016eHV5A20yUehyTJ1X_ https://pages.tmall.com/wow/z/sale/nsrSolution/foreignTrade-home?wh_biz=tm&wx_navbar_transparent=true&pull_refresh=true&scm=20140748.366.366.1614096067122_7 https://ossgw.alicdn.com/rapid-oss-bucket/1619079991593/ltao_home_miaosha_mgbp_ab1.zip https://img.alicdn.com/tfs/TB1NvfjRYY1gK0jSZTEXXXDQVXa-96-96.png https://img.alicdn.com/tfs/TB1RDCCVGL7gK0jSZFBXXXZZpXa-96-96.png https://amc201710.alipay.com/amc-h5.js https://market.m.taobao.com/app/c2m/tttm-shop/index.html?disableNav=YES&scm=20140748.366.366.1614096067122_9&scm=20140748.367.367.1618815144578_7 https://gw.alicdn.com/imgextra/i4/O1CN01mIXXz31UMsQIC1Kdl_ https://gw.alicdn.com/tfs/TB1ccjcdBBh1e4jSZFhXXcC9VXa-10-18.png https://gw.alicdn.com/imgextra/i1/O1CN013vIFBg289fdB2BAQ3_ https://pages.tmall.com/wow/sale/act/userassets?sceneId=1104477&wx_navbar_transparent=true&needLogin=true https://gw.alicdn.com/imgextra/i1/O1CN01DF6qqv21sMy27VlId_ https://gw.alicdn.com/imgextra/i1/O1CN01TfNeQF1c1p8FQmqj7_ https://pages.tmall.com/wow/z/sale/solutionaplus/caishendao?wx_navbar_transparent=true&needLogin=true&scm=20140748.366.366.1614096067122_23 https://img.alicdn.com/tfs/TB1ddXumlBh1e4jSZFhXXcC9VXa-96-96.png?getAvatar=avatar https://amc201710.alipay.com/amc-h5-polyfill.css https://pages.tmall.com/wow/z/pegasus/default/mycat-index?wh_biz=tm&disableNav=YES&needLogin=true&scm=20140748.366.366.1614096067122_4&scm=20140748.367.367.1618815144578_2 https://pages.tmall.com/wow/z/sale/nsrSolution/xxmsnsrPage1?wh_biz=tm&disableNav=YES&wx_navbar_transparent=true&pha_navbar_transparent=true&wh_kangarooprefetch=true&pha=true&from=homepage&seeAndGetIds=643121724830%2C641748434074 https://img.alicdn.com/tfs/TB1GwFtVFP7gK0jSZFjXXc5aXXa-2-96.png https://pages.tmall.com/wow/z/sale/solutionaplus/cheap-page-home?wh_biz=tm&&pha_navbar_transparent=true&wx_navbar_transparent=true&wh_kangarooprefetch=true&spm=a211oo.newhomepage.mgbp.v1&itemIds=642493622141 https://mini-app-packages-cdn.taobao.com/yaoyy_66666692/afts/file/A https://ossgw.alicdn.com/rapid-oss-bucket/1613702639603/ltao_home_huichang_new_year_festival_2021.zip https://gw.alicdn.com/imgextra/i3/O1CN01zMcyJn29jDzB5uRCl_ https://img.alicdn.com/tfs/TB1EDM1NUz1gK0jSZLeXXb9kVXa-1452-612.png https://gw.alicdn.com/imgextra/i2/O1CN017Psrem1Jx5xRrAmQN_ https://gw.alicdn.com/imgextra/i3/O1CN01AMxB211MW1P7fgHFj_ https://gw.alicdn.com/imgextra/i3/O1CN01wY3Rl01i9xruhZmsI_ https://gw.alicdn.com/imgextra/i3/O1CN013HCgg01SsMPwp65SP_ https://ossgw.alicdn.com/rapid-oss-bucket/1617678921140/homepage_searchbar_v2_message.zip https://img.alicdn.com/tfs/TB12QQeYxD1gK0jSZFsXXbldVXa-116-100.png https://csmobile.alipay.com/router.htm?scene=app_zkxesm http://m.ltao.com/search?_navigation_params=%7B%22animated%22%3A%220%22%7D&spm=a211oo.newhomepage.search.search&g_from=home_search_button https://img.alicdn.com/tfs/TB1G.tdmBBh1e4jSZFhXXcC9VXa-232-116.png?getAvatar=avatar https://gw.alicdn.com/bao/uploaded/TB1wrITdRUSMeJjSszcXXbnwVXa-144-144.png https://amc201710.alipay.com/amc-h5-polyfill.js https://ossgw.alicdn.com/rapid-oss-bucket/1615962182383/ltao_home_icon_v2_dxc.zip http://m.ltao.com/59baoyou?un_flutter=true&flutter_path=/59baoyou&chrodId=2433 https://amc201710.alipay.com/amc.css https://gw.alicdn.com/imgextra/i1/O1CN01xvjQ9m1bITvmWozKb_ https://pages.tmall.com/wow/z/sale/nsrSolution/factoryBuying-home?wh_biz=tm&wh_showError=true&wx_navbar_transparent=true&wh_kangarooprefetch=true&pull_refresh=true&scm=20140748.366.366.1614096067122_14 https://gw.alicdn.com/imgextra/i2/O1CN01ejGcn11kUEdYBkvrt_ https://market.m.taobao.com/app/c2m/tttm-shop/index.html?disableNav=YES&scm=20140748.366.366.1614096067122_9 https://gw.alicdn.com/imgextra/i4/O1CN01Weck8P1sTKmWew32Y_ https://pages.tmall.com/wow/z/sale/solutionaplus/tj-fission-share-home?&wx_navbar_transparent=true&needLogin=true&scm=20140748.366.366.1618301260833_2&scm=20140748.367.367.1618815144578_1 https://gw.alicdn.com/imgextra/i2/O1CN01viSRvg1Vf1izJNZw2_ https://gw.alicdn.com/imgextra/i3/O1CN01Ms2wfg1YkvgQACDzG_ http://alipay-rmsdeploy-image.cn-hangzhou.alipay.aliyun-inc.com/jet-dev/AP_66666692/u7dirm6ha3s/ http://m.ltao.com/messagecenter?_navigation_params=%7B%22animated%22%3A%220%22%7D&spm=a211oo.newhomepage.search.messagecenter&needLogin=true https://pages.tmall.com/wow/z/sale/nsrSolution/xxmsnsrPage1?wh_biz=tm&disableNav=YES&wx_navbar_transparent=true&pha_navbar_transparent=true&wh_kangarooprefetch=true&pha=true&from=homepage https://pages.tmall.com/wow/z/sale/solutionaplus/tj-fission-share-home?&wx_navbar_transparent=true&needLogin=true&scm=20140748.366.366.1618301260833_2 https://gw.alicdn.com/imgextra/i2/O1CN01P4Rrl91q0otSMEFbO_ https://gw.alicdn.com/imgextra/i3/O1CN01KmkihR1b5CQcvTcLx_ https://gw.alicdn.com/imgextra/i1/O1CN01EW1i3a1jGCtEaRtFf_ https://gw.alicdn.com/imgextra/i4/O1CN013F6WcV1X7Fl2dK8CC_ https://ossgw.alicdn.com/rapid-oss-bucket/1615368782705/ltao_home_newbee_benifit_dxc_0.zip https://market.m.taobao.com/app/tmall-wireless/tmallfarm/index.html?disableNav=YES&from=taobaolite&needLogin=true&scm=20140748.366.366.1614096067122_13 https://gw.alicdn.com/imgextra/i4/O1CN01jBIq381k7KppMq1WS_ https://66666692.hybrid.miniapp.taobao.com https://gw.alicdn.com/bao/uploaded/TB1l473QlLoK1RjSZFuXXXn0XXa.amr https://gw.alicdn.com/imgextra/i3/O1CN01SILJ281PZdMN4kFpE_ https://ossgw.alicdn.com/rapid-oss-bucket/1618811812878/ltao_home_waterfall_feed_item_dxc.zip |
自研引擎-A |
|
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference-deprecated#syntax-3 https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#example-8 https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference-deprecated#targetrequest-builder https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#getthirdpartyid |
com/adobe/marketing/mobile/TargetCore.java |
|
https://display.ad.daum.net/sdk/native |
com/kakao/adfit/ads/na/i.java |
|
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#gettntid https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#clearprefetchcache https://aep-sdks.gitbook.io/docs/using-mobile-extensions/mobile-core/configuration/configuration-api-reference#configurewithappid https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#setpreviewrestartdeeplink https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#locationsdisplayed https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#retrievelocationcontent https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#example-4 https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#resetexperience https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#setthirdpartyid https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#prefetchcontent https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#locationclicked https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#getthirdpartyid |
com/adobe/marketing/mobile/Target.java |
|
http://211.62.152.210/get_ad.mezzo/? |
com/mmc/common/api/ApiManager.java |
|
https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#send-an-mbox-display-notification https://%s/rest/v1/delivery/?client=%s&sessionid=%s https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#set-preview-restart-deeplink https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#send-an-mbox-click-notification |
com/adobe/marketing/mobile/TargetExtension.java |
|
https://%s/rest/v1/delivery/?client=%s&sessionid=%s |
com/adobe/marketing/mobile/TargetConstants.java |
|
https://%s/demoptout.jpg? https://%s/event? |
com/adobe/marketing/mobile/AudienceExtension.java |
|
1.6.6.4 |
com/nuance/dragon/toolkit/b/u.java |
|
https://assets.adobedtm.com/%s.json |
com/adobe/marketing/mobile/ConfigurationExtension.java |
|
javascript:document.body.innerhtml='' https://display.ad.daum.net/ |
com/kakao/adfit/ads/m.java |
|
javascript:window.vungle.mraidbridgeext.requestmraidclose |
com/vungle/warren/ui/presenter/MRAIDAdPresenter.java |
|
https://mtag.mman.kr http://211.62.152.210 https://advimg.ad-mapps.com/sdk/js/ver/200/contents_movie.html https://advimg.ad-mapps.com/sdk/js/ver/200/contents.html |
com/mmc/common/MzConfig.java |
|
https://%s/demoptout.jpg? |
com/adobe/marketing/mobile/AudienceConstants.java |
|
https://open.e.189.cn/openapi/special/gettimestamp.do https://open.e.189.cn/ http://open.e.189.cn/openapi/networkauth/pregetmobile.do http://open.e.189.cn/ |
cn/com/chinatelecom/a/a/d/b.java |
|
https://vungle.com/privacy/ |
com/vungle/warren/ui/presenter/LocalAdPresenter.java |
|
https://play.google.com/store/apps/details? |
com/kakao/adfit/common/inappbrowser/widget/IABLayout.java |
|
https://blob%s.griffon.adobe.com |
com/adobe/marketing/mobile/AssuranceBlob.java |
|
https://put.diana.kakao.com/api/put/e2ae64bb4f212bf |
com/kakao/adfit/d/n.java |
|
javascript:window.vungle.mraidbridge.notifycommandcomplete javascript:window.vungle.mraidbridge.notifypropertieschange javascript:window.vungle.mraidbridge.notifyreadyevent |
com/vungle/warren/ui/view/VungleWebClient.java |
|
https://%s/v3/%s/end |
com/adobe/marketing/mobile/LegacyReferrerHandler.java |
|
http://www.apptentive.com/?source=%s http://www.apptentive.com/privacy/?source=%s |
com/apptentive/android/sdk/module/engagement/interaction/fragment/AboutFragment.java |
|
https://api.apptentive.com |
com/apptentive/android/sdk/util/Constants.java |
|
https://ads.tnkad.net |
com/tnkfactory/ad/pub/a.java |
|
https://aep-sdks.gitbook.io/docs/beta/project-griffon/set-up-project-griffon#register-griffon-with-mobile-core |
com/adobe/marketing/mobile/Assurance.java |
|
https://blob%s.griffon.adobe.com |
com/adobe/marketing/mobile/AssuranceConstants.java |
|
https://aep-sdks.gitbook.io/docs/beta/project-griffon/set-up-project-griffon#register-griffon-with-mobile-core |
com/adobe/marketing/mobile/AssuranceExtension.java |
|
wss://connect%s.griffon.adobe.com/client/v1 |
com/adobe/marketing/mobile/AssurancePinCodeEntryURLProvider.java |
|
https://learn.apptentive.com/knowledge-base/android-integration-reference/#migrating-from-support-library-to-androidx |
com/apptentive/android/sdk/Apptentive.java |
|
https://api.apptentive.com/debug_token/verify |
com/apptentive/android/sdk/debug/LogMonitor.java |
|
https://display.ad.daum.net/sdk/banner |
com/kakao/adfit/ads/ba/BannerAdConfig.java |
|
1.6.6.4 http://www.apptentive.com/?source=%s https://%s/demoptout.jpg? http://open.e.189.cn/openapi/networkauth/pregetmobile.do https://ads.tnkad.net https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#retrievelocationcontent https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#resetexperience https://play.google.com/store/apps/details? https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#setthirdpartyid https://advimg.ad-mapps.com/sdk/js/ver/200/contents.html http://211.62.152.210/get_ad.mezzo/? https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#send-an-mbox-display-notification https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#send-an-mbox-click-notification https://blob%s.griffon.adobe.com https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#set-preview-restart-deeplink https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#example-4 https://display.ad.daum.net/ https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#prefetchcontent https://api.apptentive.com/debug_token/verify https://aep-sdks.gitbook.io/docs/using-mobile-extensions/mobile-core/configuration/configuration-api-reference#configurewithappid https://put.diana.kakao.com/api/put/e2ae64bb4f212bf https://display.ad.daum.net/sdk/native https://vungle.com/privacy/ https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference-deprecated#syntax-3 http://open.e.189.cn/ https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#gettntid https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#clearprefetchcache javascript:window.vungle.mraidbridge.notifypropertieschange https://advimg.ad-mapps.com/sdk/js/ver/200/contents_movie.html https://aep-sdks.gitbook.io/docs/beta/project-griffon/set-up-project-griffon#register-griffon-with-mobile-core javascript:window.vungle.mraidbridge.notifycommandcomplete javascript:document.body.innerhtml='' wss://connect%s.griffon.adobe.com/client/v1 https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#example-8 http://211.62.152.210 http://www.apptentive.com/privacy/?source=%s https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#getthirdpartyid https://learn.apptentive.com/knowledge-base/android-integration-reference/#migrating-from-support-library-to-androidx https://open.e.189.cn/openapi/special/gettimestamp.do https://display.ad.daum.net/sdk/banner javascript:window.vungle.mraidbridge.notifyreadyevent https://%s/v3/%s/end https://assets.adobedtm.com/%s.json https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#setpreviewrestartdeeplink https://%s/event? https://api-e189.21cn.com/gw/client/accountmsg.do https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#locationsdisplayed javascript:window.vungle.mraidbridgeext.requestmraidclose https://mtag.mman.kr https://api.apptentive.com https://%s/rest/v1/delivery/?client=%s&sessionid=%s https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference#locationclicked https://open.e.189.cn/ https://aep-sdks.gitbook.io/docs/using-mobile-extensions/adobe-target/target-api-reference-deprecated#targetrequest-builder |
自研引擎-S |
FIREBASE实例
邮箱
| 源码文件 | |
|---|---|
|
support@apptentive.com |
com/apptentive/android/sdk/debug/LogMonitorSession.java |
|
support@apptentive.com |
自研引擎-S |
追踪器
| 名称 | 类别 | 网址 |
|---|---|---|
| AdFit (Daum) | https://reports.exodus-privacy.eu.org/trackers/156 | |
| Adobe Experience Cloud | https://reports.exodus-privacy.eu.org/trackers/229 | |
| Apptentive | Analytics | https://reports.exodus-privacy.eu.org/trackers/115 |
| JiGuang Aurora Mobile JPush | Analytics | https://reports.exodus-privacy.eu.org/trackers/343 |
| TNK Factory | Advertisement | https://reports.exodus-privacy.eu.org/trackers/225 |
| Vungle | Advertisement | https://reports.exodus-privacy.eu.org/trackers/169 |
密钥凭证
活动列表
已显示 10 个activities
1、 com.tpdjrvbz.pzurupjt.dqtmXgrqBqCmiKT
2、 com.google.android.gms.common.api.GoogleApiActivity
3、 com.tpdjrvbz.pzurupjt.util.YPiczZsQlcXkKqe
4、 com.tpdjrvbz.pzurupjt.util.gkaLSNSTUKORuBv
5、 com.tpdjrvbz.pzurupjt.iNxVPZLeCgPIWpR
6、 com.tpdjrvbz.pzurupjt.util.QukJGYZDPQkWVax
7、 com.tpdjrvbz.pzurupjt.inject.cRsFUlTcHxovcfP
8、 com.tpdjrvbz.pzurupjt.xxeUCpnCPywpIOh
9、 com.tpdjrvbz.pzurupjt.YYNHACkqZZLnMNZ
10、 com.tpdjrvbz.pzurupjt.util.KqziJNKBfhPomqU
服务列表
已显示 3 个services
1、 com.tpdjrvbz.pzurupjt.AUteoqDPnZkEsIE
2、 com.tpdjrvbz.pzurupjt.NmbhUUNtBjSACEn
3、 com.tpdjrvbz.pzurupjt.qThYgUOPGvUlFpq
广播接收者列表
已显示 3 个receivers
1、 com.tpdjrvbz.pzurupjt.receiver.jwNtHUqlOhedwsr
2、 com.tpdjrvbz.pzurupjt.IaxmUCXzuuhJtOh
3、 com.tpdjrvbz.pzurupjt.receiver.zwWBojAbwUxqztr
内容提供者列表
第三方SDK
| SDK名称 | 开发者 | 描述信息 |
|---|---|---|
| 极光推送 | 极光 | JPush 是经过考验的大规模 App 推送平台，每天推送消息数超过 5 亿条。 开发者集成 SDK 后，可以通过调用 API 推送消息。同时，JPush 提供可视化的 web 端控制台发送通知，统计分析推送效果。 JPush 全面支持 Android, iOS, Winphone 三大手机平台。 |
文件列表
classes.dex
classes2.dex
classes3.dex
classes4.dex
classes5.dex
classes6.dex
classes7.dex
res/drawable-xxhdpi/googleg_disabled_color_18.png
res/drawable-xxhdpi/googleg_standard_color_18.png
res/drawable-xxhdpi/common_google_signin_btn_text_dark_normal_background.png
res/drawable-xxhdpi/common_google_signin_btn_icon_dark_normal_background.png
res/drawable-xxhdpi/common_google_signin_btn_text_light_normal_background.png
res/drawable-xxhdpi/common_google_signin_btn_icon_light_normal_background.png
res/drawable-hdpi/googleg_disabled_color_18.png
res/drawable-hdpi/googleg_standard_color_18.png
res/drawable-hdpi/common_google_signin_btn_text_dark_normal_background.png
res/drawable-hdpi/common_google_signin_btn_icon_dark_normal_background.png
res/drawable-hdpi/common_google_signin_btn_text_light_normal_background.png
res/drawable-hdpi/common_full_open_on_phone.png
res/drawable-hdpi/common_google_signin_btn_icon_light_normal_background.png
res/mipmap-mdpi/ic_launcher_round.png
res/mipmap-mdpi/ic_launcher.png
res/mipmap-mdpi/ic_launcher_foreground.png
res/mipmap-anydpi-v26/ic_launcher_round.xml
res/mipmap-anydpi-v26/ic_launcher.xml
res/mipmap-hdpi/ic_launcher_round.png
res/mipmap-hdpi/ic_launcher.png
res/mipmap-hdpi/ic_launcher_foreground.png
res/mipmap-xhdpi/ic_launcher_round.png
res/mipmap-xhdpi/ic_launcher.png
res/mipmap-xhdpi/ic_launcher_foreground.png
res/drawable-mdpi/googleg_disabled_color_18.png
res/drawable-mdpi/googleg_standard_color_18.png
res/drawable-mdpi/common_google_signin_btn_text_dark_normal_background.png
res/drawable-mdpi/common_google_signin_btn_icon_dark_normal_background.png
res/drawable-mdpi/common_google_signin_btn_text_light_normal_background.png
res/drawable-mdpi/common_google_signin_btn_icon_light_normal_background.png
res/mipmap-xxhdpi/ic_launcher_round.png
res/mipmap-xxhdpi/ic_launcher.png
res/mipmap-xxhdpi/ic_launcher_foreground.png
res/drawable/common_google_signin_btn_text_dark.xml
res/drawable/common_google_signin_btn_text_dark_normal.xml
res/drawable/common_google_signin_btn_icon_light_normal.xml
res/drawable/common_google_signin_btn_text_light_normal.xml
res/drawable/common_google_signin_btn_text_disabled.xml
res/drawable/common_google_signin_btn_icon_disabled.xml
res/drawable/common_google_signin_btn_text_light_focused.xml
res/drawable/ic_launcher_foreground.xml
res/drawable/common_google_signin_btn_icon_light.xml
res/drawable/common_google_signin_btn_text_dark_focused.xml
res/drawable/$ic_launcher_foreground__0.xml
res/drawable/common_google_signin_btn_icon_dark_focused.xml
res/drawable/common_google_signin_btn_icon_dark.xml
res/drawable/common_google_signin_btn_text_light.xml
res/drawable/common_google_signin_btn_icon_dark_normal.xml
res/drawable/ic_launcher_background.xml
res/drawable/common_google_signin_btn_icon_light_focused.xml
res/xml/asclllservizio.xml
res/xml/nsrlllseclllcfg.xml
res/mipmap-xxxhdpi/ic_launcher_round.png
res/mipmap-xxxhdpi/ic_launcher.png
res/mipmap-xxxhdpi/ic_launcher_foreground.png
res/color/common_google_signin_btn_text_dark.xml
res/color/common_google_signin_btn_tint.xml
res/color/common_google_signin_btn_text_light.xml
res/drawable-xhdpi/googleg_disabled_color_18.png
res/drawable-xhdpi/googleg_standard_color_18.png
res/drawable-xhdpi/common_google_signin_btn_text_dark_normal_background.png
res/drawable-xhdpi/common_google_signin_btn_icon_dark_normal_background.png
res/drawable-xhdpi/common_google_signin_btn_text_light_normal_background.png
res/drawable-xhdpi/common_full_open_on_phone.png
res/drawable-xhdpi/common_google_signin_btn_icon_light_normal_background.png
AndroidManifest.xml
resources.arsc
assets/weex_config_interactive.json
assets/grs_sdk_global_route_config_opendevicesdk.json
assets/fonts/purchase_iconfont.ttf
assets/fonts/ali_purchase_ext_iconfont.ttf
assets/weex_config_tbplay.json
assets/QUICKPAY@pwd-validate-flex
assets/AlipayNumber.ttf
assets/weex_config_shopref.json
assets/weex_config_evocationapp.json
assets/amc.i18n.zh_HK
assets/weex_config_mytaobao.json
assets/uik_core_iconfont.ttf
assets/map/7/style_antsports01.data
assets/map/7/style_light.data
assets/map/style_antsports01.data
assets/map/style_light.data
assets/QUICKPAY@recommend-setspwd-flex
assets/dinamic/buy_pay_for_another_ltao.xml
assets/dinamic/buy_select_ltao.xml
assets/dinamic/buy_quantity_ltao.xml
assets/dinamic/buy_switch_ltao.xml
assets/dinamic/buy_address_ltao.xml
assets/dinamic/buy_image_select_ltao.xml
assets/dinamic/buy_input_ltao.xml
assets/dinamic/buy_tips_tj_new_ltao.xml
assets/dinamic/buy_submit_ltao.xml
assets/dinamic/buy_tips_ltao.xml
assets/dinamic/buy_image_text_ltao.xml
assets/dinamic/dx_appstyle.json
assets/dinamic/buy_switch_tj_ltao.xml
assets/dinamic/trade_test_address.xml
assets/dinamic/buy_item_ltao.xml
assets/amc.i18n.en_US
assets/yuv2rgb.vert
assets/weex_config_tblive.json
assets/lastAccetsbkup.zip
assets/updatesdkcas.bks
assets/weex_config_fashionai.json
assets/QUICKPAY@waika-select-country-and-area-flex
assets/weex_config_bindingx.json
assets/vi-amc.js
assets/triver.mock.appinfo.json
assets/workerjs_multiworker.js
assets/MOBILEIC@idNoMacau
assets/yuv2rgb.frag
assets/grs_sdk_global_route_config_apptouchupdatesdk.json
assets/66666692.amr
assets/grs_sdk_global_route_config_updatesdk.json
assets/ag_sdk_cbg_root.cer
assets/grs_sdk_global_route_config_opensdkService.json
assets/framework_slice/images/framework_slice_light.png
assets/framework_slice/framework_slice.json
assets/triver_iconfont.ttf
assets/widget_v8.js
assets/primary80.prof
assets/tr_china_cities.json
assets/video_weex.msoac
assets/amc-h5.js
assets/amc.i18n.zh_TW
assets/QUICKPAY@card-no-flex
assets/tr_china_cities_v2.db
assets/ext/purchase_ext_plugins.json
assets/66666692.appinfo.json
assets/windmill.worker.js
assets/cahiBvC/lUTbVnhpF1.Ump
assets/MOBILEIC@secret-question
assets/theme/configuration.json
assets/QUICKPAY@frontpay-limit-query-flex.html
assets/homepage_dxc_data.json
assets/voice_thinking/images/voice_thinking_image_0.png
assets/voice_thinking/voice_thinking.json
assets/video_windmillapi.json
assets/workerjs_v8.js
build-data.properties
error_prone/Annotations.gwt.xml
javax/inject/Inject.gwt.xml
jsr305_annotations/Jsr305_annotations.gwt.xml
jsr330_inject/Jsr330_inject.gwt.xml
third_party/java_src/error_prone/project/annotations/Annotations.gwt.xml
third_party/java_src/error_prone/project/annotations/Google_internal.gwt.xml
third_party/java_src/jsr330_inject/Jsr330_inject.gwt.xml
META-INF/AP-SHOPP.SF
META-INF/AP-SHOPP.RSA
META-INF/MANIFEST.MF
污点分析
当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……| 规则名称 | 描述信息 | 操作 |
|---|---|---|
| 病毒分析 | 使用安卓恶意软件常用的API进行污点分析 | 开始分析 |
| 漏洞挖掘 | 漏洞挖掘场景下的污点分析 | 开始分析 |
| 隐私合规 | 隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 | 开始分析 |
| 密码分析 | 分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等 | 开始分析 |
| Callback | 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员 | 开始分析 |