文件信息
文件名称 Huamai.apk证书信息
二进制文件已签名
v1 签名: True
v2 签名: True
v3 签名: True
v4 签名: False
主题: C=ChYvzjgW, ST=CSIJTJON, L=BynFaZoh, O=CgInYznw, OU=ngagvcEs, CN=TGqIfXFG
签名算法: rsassa_pkcs1v15
有效期自: 2024-08-21 05:47:01+00:00
有效期至: 2034-08-19 05:47:01+00:00
发行人: C=ChYvzjgW, ST=CSIJTJON, L=BynFaZoh, O=CgInYznw, OU=ngagvcEs, CN=TGqIfXFG
序列号: 0x6a422b7c9ff7c469
哈希算法: sha256
证书MD5: 5d2fd6fad1aedd072025ef5b86a40faa
证书SHA1: cd2aa143c88053a3cc118e262541fe24627f647c
证书SHA256: 781606174009bc0b496883ec7bed8c87f0c7f1b991fe077d82865b4c41a20f5e
证书SHA512: 6d84546bad4f796116594f49d54015b2ccbe6b2aa371fa79a01e40c4578d9344262b9d757db2cb7a562c4e257d050ba3ab339914875483d37c0ac7f6f120654b
公钥算法: rsa
密钥长度: 2048
指纹: 7489c3dec4d9452567e2623d268c50c999664142e2abd901ce3ee40ea3ad7c56
找到 1 个唯一证书应用程序权限
| 权限名称 | 安全等级 | 权限内容 | 权限描述 | 关联代码 |
|---|---|---|---|---|
| android.permission.INTERNET | 危险 | 完全互联网访问 | 允许应用程序创建网络套接字。 | 显示文件 |
| android.permission.ACCESS_NETWORK_STATE | 普通 | 获取网络状态 | 允许应用程序查看所有网络的状态。 | 显示文件 |
| android.permission.ACCESS_WIFI_STATE | 普通 | 查看Wi-Fi状态 | 允许应用程序查看有关Wi-Fi状态的信息。 | 显示文件 |
| android.permission.WAKE_LOCK | 危险 | 防止手机休眠 | 允许应用程序防止手机休眠，在手机屏幕关闭后后台进程仍然运行。 | |
| android.permission.WRITE_EXTERNAL_STORAGE | 危险 | 读取/修改/删除外部存储内容 | 允许应用程序写入外部存储。 | 显示文件 |
| android.permission.VIBRATE | 普通 | 控制振动器 | 允许应用程序控制振动器，用于消息通知振动功能。 | 显示文件 |
证书分析
| 标题 | 严重程度 | 描述信息 |
|---|---|---|
| 已签名应用 | 信息 | 应用程序已使用代码签名证书进行签名 |
MANIFEST分析
| 序号 | 问题 | 严重程度 | 描述信息 | 操作 |
|---|---|---|---|---|
| 1 |
应用程序可以安装在有漏洞的已更新 Android 版本上 Android 5.1-5.1.1, [minSdk=22] |
信息 | 该应用程序可以安装在具有多个未修复漏洞的旧版本 Android 上。这些设备不会从 Google 接收合理的安全更新。支持 Android 版本 => 10、API 29 以接收合理的安全更新。 | |
| 2 |
应用程序已启用明文网络流量 [android:usesCleartextTraffic=true] |
警告 | 应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。 | |
| 3 |
应用程序数据可以被备份 [android:allowBackup=true] |
警告 | 这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。 |
可浏览的ACTIVITIES
| ACTIVITY | INTENT |
|---|
网络安全配置
| 序号 | 范围 | 严重级别 | 描述 |
|---|
API调用分析
源代码分析
| 序号 | 问题 | 等级 | 参考标准 | 文件位置 | 操作 |
|---|---|---|---|---|---|
| 1 | 应用程序记录日志信息,不得记录敏感信息 | 信息 | CWE: CWE-532: 通过日志文件的信息暴露 OWASP MASVS: MSTG-STORAGE-3 | 显示文件 | |
| 2 | SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 | 高危 | CWE: CWE-295: 证书验证不恰当 OWASP Top 10: M3: Insecure Communication OWASP MASVS: MSTG-NETWORK-3 | com/alibaba/pdns/net/b.java | |
| 3 | 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 | 警告 | CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2 | 显示文件 | |
| 4 | 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 | 警告 | CWE: CWE-312: 明文存储敏感信息 OWASP Top 10: M9: Reverse Engineering OWASP MASVS: MSTG-STORAGE-14 | com/getcapacitor/Bridge.java com/getcapacitor/Plugin.java | |
| 5 | IP地址泄露 | 警告 | CWE: CWE-200: 信息泄露 OWASP MASVS: MSTG-CODE-2 | com/alibaba/pdns/d.java | |
| 6 | 应用程序创建临时文件。敏感信息永远不应该被写进临时文件 | 警告 | CWE: CWE-276: 默认权限不正确 OWASP Top 10: M2: Insecure Data Storage OWASP MASVS: MSTG-STORAGE-2 | com/getcapacitor/BridgeWebChromeClient.java | |
| 7 | 应用程序使用不安全的随机数生成器 | 警告 | CWE: CWE-330: 使用不充分的随机数 OWASP Top 10: M5: Insufficient Cryptography OWASP MASVS: MSTG-CRYPTO-6 | com/alibaba/pdns/h.java | |
| 8 | 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 | 安全 | OWASP MASVS: MSTG-NETWORK-4 | com/alibaba/pdns/c/a.java |
动态库分析
| 序号 | 动态库 | NX(堆栈禁止执行) | STACK CANARY(栈保护) | RELRO | RPATH（指定SO搜索路径） | RUNPATH（指定SO搜索路径） | FORTIFY(常用函数加强检查) | SYMBOLS STRIPPED(裁剪符号表) |
|---|
文件分析
| 序号 | 问题 | 文件 |
|---|
VIRUSTOTAL扫描
VirusTotal: 未执行扫描
滥用权限
恶意软件常用权限 是被已知恶意软件广泛滥用的权限。
其它常用权限 是已知恶意软件经常滥用的权限。
IP地图
手机号码
网址
| 网址信息 | 源码文件 |
|---|---|
|
https://do-list-all.s3.ap-east-1.amazonaws.com/ https://www.huobi.com/-/x/hb/p/api/contents/currency/icon/usdt.png https://lanhu.oss-cn-beijing.aliyuncs.com/SketchPng996625b9383ab893ff02c3fcba9e924b8b99e1deec7082d5bdab8db4820a80c4 https://china-b2.names.irish/csj/mda-pbc0tmg10u6njzvw.mp4 https://hmia-api.hxkej.com/api https://static.meiqia.com/widget/loader.js https://ssl.captcha.qq.com/TCaptcha.js https://hm-api.hmdgjk.com/api https://image.muniu.me/csj/h3.png https://lanhu.oss-cn-beijing.aliyuncs.com/SketchPngd90263a3ad82050d38a14548388cabe36bb6f35a90bd9fef02c1ae5f0a2da80d https://www.allianz.com.cn/privacy-announcement.php https://lanhu.oss-cn-beijing.aliyuncs.com/SketchPng33b6a36ffa9be15caa7883685bd6ba882db58e1a817705db8e875d1d7d57f7b2 https://vv.video.qq.com/checktime?otype=json https://lanhu.oss-cn-beijing.aliyuncs.com/SketchPng64b6a0543fc5589b7104bb7d2946c66f8c973577e610cf78be996800c58d4bb1 https://do-list.oss-accelerate.aliyuncs.com/ https://pv.sohu.com/cityjson?ie=utf-8 https://image.muniu.me/csj/h2.webp https://d6elb6puohvs4.cloudfront.net/ https://hmi.blob.core.windows.net/web/120.zip https://capacitorjs.com/ https://china-b2.names.irish/snq/home.MOV |
自研引擎-A |
|
https://dnsrepo-pub.alibaba.com/api/internet/puttermstatusdata 223.5.5.5 https://dnsrepo-pub.alibaba.com/api/internet/puttermdata 223.6.6.6 |
com/alibaba/pdns/d.java |
|
https://pdns-sdk.oss-cn-beijing.aliyuncs.com/pdnsdemo/log/upload/ |
com/alibaba/pdns/d/e.java |
|
https://capacitorjs.com/docs/apis/splash-screen#hiding-the-splash-screen |
com/capacitorjs/plugins/splashscreen/SplashScreen.java |
|
https://capgo.app/api/auto_update https://capgo.app/api/stats |
ee/forgr/capacitor_updater/CapacitorUpdaterPlugin.java |
|
https://capgo.app/api/auto_update 223.5.5.5 https://capacitorjs.com/docs/apis/splash-screen#hiding-the-splash-screen https://pdns-sdk.oss-cn-beijing.aliyuncs.com/pdnsdemo/log/upload/ https://dnsrepo-pub.alibaba.com/api/internet/puttermstatusdata https://dnsrepo-pub.alibaba.com/api/internet/puttermdata https://capgo.app/api/stats 223.6.6.6 |
自研引擎-S |
FIREBASE实例
邮箱
追踪器
| 名称 | 类别 | 网址 |
|---|
密钥凭证
活动列表
已显示 1 个activities
1、 com.f9ejfms.app.MainActivity
服务列表
广播接收者列表
内容提供者列表
已显示 2 个providers
1、 androidx.core.content.FileProvider
2、 androidx.startup.InitializationProvider
第三方SDK
| SDK名称 | 开发者 | 描述信息 |
|---|---|---|
| File Provider | Android | FileProvider 是 ContentProvider 的特殊子类，它通过创建 content://Uri 代替 file:///Uri 以促进安全分享与应用程序关联的文件。 |
| Jetpack App Startup | App Startup 库提供了一种直接，高效的方法来在应用程序启动时初始化组件。库开发人员和应用程序开发人员都可以使用 App Startup 来简化启动顺序并显式设置初始化顺序。App Startup 允许您定义共享单个内容提供程序的组件初始化程序，而不必为需要初始化的每个组件定义单独的内容提供程序。这可以大大缩短应用启动时间。 |
文件列表
AndroidManifest.xml
resources.arsc
etHCcjfIl/0F.xml
etHCcjfIl/8.xml
etHCcjfIl/1E.xml
etHCcjfIl/a.xml
etHCcjfIl/w.xml
etHCcjfIl/11
etHCcjfIl/1S
etHCcjfIl/0s.xml
etHCcjfIl/1y
etHCcjfIl/09
etHCcjfIl/1T
etHCcjfIl/B
etHCcjfIl/1H.xml
etHCcjfIl/t
etHCcjfIl/0F
etHCcjfIl/9
etHCcjfIl/2W
etHCcjfIl/3.xml
etHCcjfIl/04
etHCcjfIl/0Z
etHCcjfIl/0r
etHCcjfIl/0D
etHCcjfIl/1P
etHCcjfIl/1a
etHCcjfIl/0j.xml
etHCcjfIl/0J.xml
etHCcjfIl/0D.xml
etHCcjfIl/1t
etHCcjfIl/0K
etHCcjfIl/0a.xml
etHCcjfIl/1C.xml
etHCcjfIl/Y
etHCcjfIl/1l
etHCcjfIl/2P
etHCcjfIl/07.xml
etHCcjfIl/2m
etHCcjfIl/0f
etHCcjfIl/2b
etHCcjfIl/0n.xml
etHCcjfIl/1R
etHCcjfIl/0e
etHCcjfIl/0k.xml
etHCcjfIl/00
etHCcjfIl/1B
etHCcjfIl/0Z.xml
etHCcjfIl/21
etHCcjfIl/f
etHCcjfIl/n
etHCcjfIl/2L
etHCcjfIl/P
etHCcjfIl/0P.xml
etHCcjfIl/B.xml
etHCcjfIl/W
etHCcjfIl/0Y
etHCcjfIl/1v
etHCcjfIl/O.xml
etHCcjfIl/0b
etHCcjfIl/0l.xml
etHCcjfIl/d
etHCcjfIl/2F
etHCcjfIl/r
etHCcjfIl/0W.xml
etHCcjfIl/u.xml
etHCcjfIl/G
etHCcjfIl/0n
etHCcjfIl/0q.xml
etHCcjfIl/2
etHCcjfIl/q.xml
etHCcjfIl/k.xml
etHCcjfIl/K
etHCcjfIl/C.xml
etHCcjfIl/0A
etHCcjfIl/I
etHCcjfIl/9.xml
etHCcjfIl/13
etHCcjfIl/0.xml
etHCcjfIl/23
etHCcjfIl/0C.xml
etHCcjfIl/1f
etHCcjfIl/0t
etHCcjfIl/0z.xml
etHCcjfIl/7.xml
etHCcjfIl/0y.xml
etHCcjfIl/0c
etHCcjfIl/2B
etHCcjfIl/M.xml
etHCcjfIl/A.xml
etHCcjfIl/0s
etHCcjfIl/2d
etHCcjfIl/12
etHCcjfIl/j
etHCcjfIl/0E
etHCcjfIl/04.xml
etHCcjfIl/l
etHCcjfIl/0H
etHCcjfIl/1V
etHCcjfIl/7
etHCcjfIl/C
etHCcjfIl/0G
etHCcjfIl/2Q
etHCcjfIl/1X
etHCcjfIl/0u.xml
etHCcjfIl/2k
etHCcjfIl/26
etHCcjfIl/G.xml
etHCcjfIl/1n
etHCcjfIl/L
etHCcjfIl/1w
etHCcjfIl/8
etHCcjfIl/s.xml
etHCcjfIl/O
etHCcjfIl/2c
etHCcjfIl/J.xml
etHCcjfIl/2H
etHCcjfIl/2O
etHCcjfIl/i.xml
etHCcjfIl/A
etHCcjfIl/1J.xml
etHCcjfIl/D.xml
etHCcjfIl/1x
etHCcjfIl/0i
etHCcjfIl/c.xml
etHCcjfIl/3
etHCcjfIl/0L
etHCcjfIl/a
etHCcjfIl/1D
etHCcjfIl/0M
etHCcjfIl/1o
etHCcjfIl/1d
etHCcjfIl/0p.xml
etHCcjfIl/p.xml
etHCcjfIl/1s
etHCcjfIl/13.xml
etHCcjfIl/m
etHCcjfIl/2V
etHCcjfIl/1O
etHCcjfIl/0L.xml
etHCcjfIl/v.xml
etHCcjfIl/28
etHCcjfIl/18.xml
etHCcjfIl/0M.xml
etHCcjfIl/07
etHCcjfIl/2g
etHCcjfIl/e.xml
etHCcjfIl/0N
etHCcjfIl/0t.xml
etHCcjfIl/0c.xml
etHCcjfIl/1J
etHCcjfIl/09.xml
etHCcjfIl/0B.xml
etHCcjfIl/D
etHCcjfIl/R
etHCcjfIl/w
etHCcjfIl/03.xml
etHCcjfIl/Z.xml
etHCcjfIl/2o
etHCcjfIl/5.xml
etHCcjfIl/2G
etHCcjfIl/2l
etHCcjfIl/W.xml
etHCcjfIl/10.xml
etHCcjfIl/d.xml
etHCcjfIl/Y.xml
etHCcjfIl/0E.xml
etHCcjfIl/R.xml
etHCcjfIl/e
etHCcjfIl/n.xml
etHCcjfIl/0N.xml
etHCcjfIl/g.xml
etHCcjfIl/E
etHCcjfIl/2n
etHCcjfIl/b
etHCcjfIl/08.xml
etHCcjfIl/2f
etHCcjfIl/2T
etHCcjfIl/0T.xml
etHCcjfIl/T
etHCcjfIl/2e
etHCcjfIl/X.xml
etHCcjfIl/0O.xml
etHCcjfIl/P.xml
etHCcjfIl/0w.xml
etHCcjfIl/1q
etHCcjfIl/0T
etHCcjfIl/0X.xml
etHCcjfIl/f.xml
etHCcjfIl/17.xml
etHCcjfIl/03
etHCcjfIl/L.xml
etHCcjfIl/h
etHCcjfIl/0V
etHCcjfIl/05
etHCcjfIl/s
etHCcjfIl/F
etHCcjfIl/2h
etHCcjfIl/0I.xml
etHCcjfIl/0U.xml
etHCcjfIl/1F.xml
etHCcjfIl/2R
etHCcjfIl/0y
etHCcjfIl/1m
etHCcjfIl/0i.xml
etHCcjfIl/S
etHCcjfIl/1I
etHCcjfIl/1g
etHCcjfIl/1C
etHCcjfIl/q
etHCcjfIl/15.xml
etHCcjfIl/05.xml
etHCcjfIl/c
etHCcjfIl/0B
etHCcjfIl/2E
etHCcjfIl/2N
etHCcjfIl/5
etHCcjfIl/p
etHCcjfIl/25
etHCcjfIl/o.xml
etHCcjfIl/1u
etHCcjfIl/N
etHCcjfIl/H
etHCcjfIl/0j
etHCcjfIl/1p
etHCcjfIl/0f.xml
etHCcjfIl/0P
etHCcjfIl/0m
etHCcjfIl/0m.xml
etHCcjfIl/2Z
etHCcjfIl/0K.xml
etHCcjfIl/0W
etHCcjfIl/x
etHCcjfIl/15
etHCcjfIl/1c
etHCcjfIl/02
etHCcjfIl/11.xml
etHCcjfIl/0p
etHCcjfIl/0
etHCcjfIl/17
etHCcjfIl/g
etHCcjfIl/1W
etHCcjfIl/Q.xml
etHCcjfIl/1A
etHCcjfIl/b.xml
etHCcjfIl/1h
etHCcjfIl/0R.xml
etHCcjfIl/0o
etHCcjfIl/T.xml
etHCcjfIl/0d.xml
etHCcjfIl/H.xml
etHCcjfIl/2M
etHCcjfIl/Q
etHCcjfIl/E.xml
etHCcjfIl/0O
etHCcjfIl/2U
etHCcjfIl/v
etHCcjfIl/2S
etHCcjfIl/0b.xml
etHCcjfIl/1K
etHCcjfIl/0U
etHCcjfIl/0e.xml
etHCcjfIl/0v.xml
etHCcjfIl/1N
etHCcjfIl/2Y
etHCcjfIl/24
etHCcjfIl/08
etHCcjfIl/J
etHCcjfIl/u
etHCcjfIl/K.xml
etHCcjfIl/2a
etHCcjfIl/1H
etHCcjfIl/1Y
etHCcjfIl/0h.xml
etHCcjfIl/0x.xml
etHCcjfIl/1U
etHCcjfIl/4
etHCcjfIl/X
etHCcjfIl/16
etHCcjfIl/0z
etHCcjfIl/S.xml
etHCcjfIl/0g.xml
etHCcjfIl/0h
etHCcjfIl/2X
etHCcjfIl/j.xml
etHCcjfIl/10
etHCcjfIl/0S
etHCcjfIl/1.xml
etHCcjfIl/6
etHCcjfIl/U
etHCcjfIl/x.xml
etHCcjfIl/1b
etHCcjfIl/y.xml
etHCcjfIl/0l
etHCcjfIl/1I.xml
etHCcjfIl/2K
etHCcjfIl/0Q.xml
etHCcjfIl/00.xml
etHCcjfIl/20
etHCcjfIl/2I
etHCcjfIl/1z
etHCcjfIl/0Q
etHCcjfIl/1D.xml
etHCcjfIl/1G.xml
etHCcjfIl/m.xml
etHCcjfIl/0V.xml
etHCcjfIl/k
etHCcjfIl/y
etHCcjfIl/0S.xml
etHCcjfIl/0R
etHCcjfIl/02.xml
etHCcjfIl/0Y.xml
etHCcjfIl/0J
etHCcjfIl/22
etHCcjfIl/o
etHCcjfIl/1k
etHCcjfIl/z
etHCcjfIl/14.xml
etHCcjfIl/2A
etHCcjfIl/06
etHCcjfIl/01
etHCcjfIl/29
etHCcjfIl/19
etHCcjfIl/Z
etHCcjfIl/2i
etHCcjfIl/06.xml
etHCcjfIl/0q
etHCcjfIl/1e
etHCcjfIl/27
etHCcjfIl/0I
etHCcjfIl/1
etHCcjfIl/V.xml
etHCcjfIl/0a
etHCcjfIl/0A.xml
etHCcjfIl/M
etHCcjfIl/1Z
etHCcjfIl/1F
etHCcjfIl/2J
etHCcjfIl/1j
etHCcjfIl/14
etHCcjfIl/0o.xml
etHCcjfIl/1B.xml
etHCcjfIl/U.xml
etHCcjfIl/2.xml
etHCcjfIl/2D
etHCcjfIl/t.xml
etHCcjfIl/0r.xml
etHCcjfIl/0k
etHCcjfIl/0w
etHCcjfIl/0d
etHCcjfIl/l.xml
etHCcjfIl/1i
etHCcjfIl/h.xml
etHCcjfIl/4.xml
etHCcjfIl/I.xml
etHCcjfIl/F.xml
etHCcjfIl/6.xml
etHCcjfIl/2j
etHCcjfIl/12.xml
etHCcjfIl/01.xml
etHCcjfIl/1E
etHCcjfIl/16.xml
etHCcjfIl/0u
etHCcjfIl/1M
etHCcjfIl/N.xml
etHCcjfIl/0C
etHCcjfIl/0x
etHCcjfIl/0G.xml
etHCcjfIl/1G
etHCcjfIl/0g
etHCcjfIl/19.xml
etHCcjfIl/2C
etHCcjfIl/i
etHCcjfIl/0H.xml
etHCcjfIl/1A.xml
etHCcjfIl/1r
etHCcjfIl/V
etHCcjfIl/0v
etHCcjfIl/r.xml
etHCcjfIl/18
etHCcjfIl/0X
etHCcjfIl/1L
etHCcjfIl/z.xml
etHCcjfIl/1Q
classes2.dex
kotlin/collections/collections.kotlin_builtins
kotlin/coroutines/coroutines.kotlin_builtins
kotlin/reflect/reflect.kotlin_builtins
kotlin/kotlin.kotlin_builtins
kotlin/annotation/annotation.kotlin_builtins
kotlin/internal/internal.kotlin_builtins
kotlin/ranges/ranges.kotlin_builtins
assets/public/icons/logo.png
assets/public/domain.json
assets/public/cordova.js
assets/public/favicon.ico
assets/public/version.json
assets/public/js/300.e97ba439.js
assets/public/js/5124.67d07f1a.js
assets/public/js/109.a53ebb97.js
assets/public/js/9227.2a8f114f.js
assets/public/js/1590.0b9cfda9.js
assets/public/js/8940.24cf50c8.js
assets/public/js/9776.0285db8d.js
assets/public/js/7130.08aa8973.js
assets/public/js/7642.c196a6fa.js
assets/public/js/1411.1eda9253.js
assets/public/js/8957.fa6a103c.js
assets/public/js/6524.f0adfedd.js
assets/public/js/4010.c863dd9b.js
assets/public/js/7867.0fc9324b.js
assets/public/js/4874.e9e8b721.js
assets/public/js/8307.7e9e0344.js
assets/public/js/7466.ed83844d.js
assets/public/js/2827.6e96e879.js
assets/public/js/9421.c522696a.js
assets/public/js/209.1d663c87.js
assets/public/js/6862.ad27ce4b.js
assets/public/js/4706.f11e3e77.js
assets/public/js/4035.b9aa734e.js
assets/public/js/7655.977e2156.js
assets/public/js/3431.58268d0a.js
assets/public/js/1186.73f0bdb6.js
assets/public/js/6852.ea655376.js
assets/public/js/1151.833fdeca.js
assets/public/js/6782.12b51c6f.js
assets/public/js/2068.98df2269.js
assets/public/js/7794.86ac305d.js
assets/public/js/6622.288f09fd.js
assets/public/js/6538.91667921.js
assets/public/js/8455.331c8f91.js
assets/public/js/6830.914a5b2e.js
assets/public/js/1087.394f7d24.js
assets/public/js/55.01a69eb0.js
assets/public/js/9706.74db173c.js
assets/public/js/2491.b65da7f2.js
assets/public/js/3640.2905eeaa.js
assets/public/js/2885.c8723ae4.js
assets/public/js/3934.bb43a428.js
assets/public/js/9383.c27fad60.js
assets/public/js/2263.ab705699.js
assets/public/js/4669.81de1a79.js
assets/public/js/6050.01736c25.js
assets/public/js/5582.5f2a328d.js
assets/public/js/9654.1f575916.js
assets/public/js/7050.c72b3638.js
assets/public/js/2542.680d8689.js
assets/public/js/7651.0a8ceeb3.js
assets/public/js/9649.df13f57f.js
assets/public/js/4836.b397180e.js
assets/public/js/1121.6f8b46fd.js
assets/public/js/9607.50603ead.js
assets/public/js/5038.335427c0.js
assets/public/js/8744.28477b66.js
assets/public/js/842.45bec5de.js
assets/public/js/7943.21cdb8b3.js
assets/public/js/5364.acb3d191.js
assets/public/js/7006.7d8231ef.js
assets/public/js/9220.22f8eac6.js
assets/public/js/3391.ec18d051.js
assets/public/js/4747.c388e23a.js
assets/public/js/3316.a6c444b5.js
assets/public/js/9823.8111a4d1.js
assets/public/js/5035.ec30698b.js
assets/public/js/6495.8abad8d8.js
assets/public/js/5472.5aa7b35f.js
assets/public/js/702.dc0fd1a7.js
assets/public/js/6561.0e87aa04.js
assets/public/js/3020.958e980e.js
assets/public/js/1010.8e932029.js
assets/public/js/73.af179feb.js
assets/public/js/8095.b56471ca.js
assets/public/js/6711.fdf79e78.js
assets/public/js/chunk-common.70809fca.js
assets/public/js/7999.9c6b694a.js
assets/public/js/728.b49b83de.js
assets/public/js/9259.6c9f15c7.js
assets/public/js/8112.79e34026.js
assets/public/js/4932.961f0165.js
assets/public/js/1271.816c5b3f.js
assets/public/js/3342.d132f260.js
assets/public/js/2877.10237088.js
assets/public/js/8979.c303e0f6.js
assets/public/js/5150.b4cc7d0b.js
assets/public/js/5448.b6a2af6b.js
assets/public/js/7361.3cbe9ef2.js
assets/public/js/911.09ea87f7.js
assets/public/js/2193.22112463.js
assets/public/js/6203.b287db4f.js
assets/public/js/2537.c2ca7529.js
assets/public/js/8714.d52d7bcc.js
assets/public/js/6558.744e3ecf.js
assets/public/js/5979.c7c5060c.js
assets/public/js/1171.f5af0722.js
assets/public/js/8080.1508fb9a.js
assets/public/js/9732.b5de7d34.js
assets/public/js/1920.04930adb.js
assets/public/js/app.e4920b91.js
assets/public/js/5912.920cc74c.js
assets/public/js/8175.8f8d6db8.js
assets/public/js/635.2b85af2d.js
assets/public/js/5227.8f9193bb.js
assets/public/js/8965.ae4484af.js
assets/public/js/3694.50de5e7b.js
assets/public/js/7032.30369dcf.js
assets/public/js/6510.452ead7f.js
assets/public/js/8246.29d9f54b.js
assets/public/js/7070.40e7ff71.js
assets/public/js/2048.06156022.js
assets/public/js/vendor.07838b0f.js
assets/public/js/7993.572148f7.js
assets/public/js/1653.c42b32e5.js
assets/public/js/8496.cfe713e8.js
assets/public/js/8675.c05bc147.js
assets/public/chatlink.html
assets/public/img/10.562efc4e.jpg
assets/public/img/14.df8e59b4.jpg
assets/public/img/32.f72e8657.jpg
assets/public/img/18.6005cdd8.jpg
assets/public/img/19.bf1f0660.jpg
assets/public/img/choujiang.0dbe94a8.jpg
assets/public/img/30.56e1006f.jpg
assets/public/img/tronlink.0e31111c.jpeg
assets/public/img/xuanchuan.acb4c04e.jpg
assets/public/img/21.6de43d77.jpg
assets/public/img/积分.fca08793.png
assets/public/img/29.49dc6894.jpg
assets/public/img/4.c5a36081.jpg
assets/public/img/wx_bg.111e4f03.png
assets/public/img/home_grid_2.b94cb5fb.png
assets/public/img/okex.c71a1490.png
assets/public/img/20.bd75c601.jpg
assets/public/img/boc_card_bg.44f601b3.webp
assets/public/img/q1.1fea6f5c.png
assets/public/img/part_6.d4b5510c.jpg
assets/public/img/zy3.21203944.png
assets/public/img/fd_bg.b463df74.jpg
assets/public/img/equity_cert.37c72bdd.jpg
assets/public/img/nav_recharge_bg.bd4f601f.png
assets/public/img/7.c57dabad.jpg
assets/public/img/part_13.826214fb.jpg
assets/public/img/by.c0a74590.png
assets/public/img/login_bg.3ac55e0c.png
assets/public/img/part_12.b85f7f5f.jpg
assets/public/img/home_grid_1.70d13d2b.png
assets/public/img/part_7.6c38e264.jpg
assets/public/img/16.bdbca924.jpg
assets/public/img/home_grid_3.554994ad.png
assets/public/img/new_header_bg.10c33557.png
assets/public/img/binance.75835625.jpeg
assets/public/img/提现问题.9eef9aa8.png
assets/public/img/28.e33f41a9.jpg
assets/public/img/5cfa96fb27a0279453233f20ae8931bc.7068de59.jpg
assets/public/img/home_grid_4.6510f113.png
assets/public/img/参投产品上面封面图.0d9dbf55.png
assets/public/img/26.196248bf.jpg
assets/public/img/462367.f9849e2e.gif
assets/public/img/main_bg_no_wallet.905ec0be.webp
assets/public/img/big_gift.04a51a14.png
assets/public/img/part_2.2ef445fc.jpg
assets/public/img/13.27954d48.jpg
assets/public/img/22.070a2949.jpg
assets/public/img/签到封面图.b434fc69.png
assets/public/img/boc_home_bg_logo.0805c3a7.png
assets/public/img/logo.588f3b6b.png
assets/public/img/34.077949fd.jpg
assets/public/img/home_grid_bg.ff400dcc.png
assets/public/img/banner-c12376e5.a85abce5.png
assets/public/img/cardTwo.a3edb745.png
assets/public/img/sq.c347ccb1.png
assets/public/img/15.964ad46b.jpg
assets/public/img/part_8.547aa81a.jpg
assets/public/img/contract.9b48b83d.png
assets/public/img/part_9.dfd6f72b.jpg
assets/public/img/hj.e11d4de0.png
assets/public/img/6.9b2a4d9f.jpg
assets/public/img/充值问题.d44973f5.png
assets/public/img/part_5.9ec26299.jpg
assets/public/img/3.db98263e.jpg
assets/public/img/part_3.3a7020b7.jpg
assets/public/img/8.048cdde8.jpg
assets/public/img/2.f8e57a52.jpg
assets/public/img/599540cf57f4c.38c5a4f2.jpg
assets/public/img/27.0a9daf44.jpg
assets/public/img/swjggz.b1b6beeb.png
assets/public/img/常见问题.df2b62fe.png
assets/public/img/11.62eb7ba3.jpg
assets/public/img/章.c224a366.png
assets/public/img/25.09aa9958.jpg
assets/public/img/5.96122adc.jpg
assets/public/img/hkd.6660b907.jpeg
assets/public/img/btn.c51aab63.png
assets/public/img/apply_bg.58930dd5.png
assets/public/img/video1_bg.ba34a5d0.png
assets/public/img/my.1c46800b.png
assets/public/img/17.aa32e9ec.jpg
assets/public/img/12.7d63c277.jpg
assets/public/img/start_button.c93536ac.png
assets/public/img/31.aec06047.jpg
assets/public/img/top_bg.99841808.png
assets/public/img/home_bg.7e8ba13a.jpg
assets/public/img/part_14.3a08fdb2.jpg
assets/public/img/官方社区.a3778b93.png
assets/public/img/home_bg_1.296bc0fb.png
assets/public/img/35.e039c1d8.jpg
assets/public/img/part_4.110df9dd.jpg
assets/public/img/header_maimai.b8678cc9.jpg
assets/public/img/36.3032bcb4.jpg
assets/public/img/kaishidati.af1002ba.jpg
assets/public/img/top_header.4ed0ba9c.png
assets/public/img/dis_top.b4df5e4f.jpg
assets/public/img/33.8376fbb9.jpg
assets/public/img/24.f8dcf5be.jpg
assets/public/img/recharge_btc.bc4f6084.png
assets/public/img/imtoken.e8623ab6.jpeg
assets/public/img/9.b4f36c73.jpg
assets/public/img/recharge_cny.1372e4b9.png
assets/public/img/part_0.310e8c34.jpg
assets/public/img/baodan.04d29c47.jpg
assets/public/img/jnjg.1ee334dd.png
assets/public/img/23.dbab4d16.jpg
assets/public/css/7655.980e3013.css
assets/public/css/2048.b2b0828a.css
assets/public/css/7006.17ef3938.css
assets/public/css/3694.d19e16d5.css
assets/public/css/5227.be121425.css
assets/public/css/9227.3a4873eb.css
assets/public/css/7032.d513df07.css
assets/public/css/109.67dcc2ae.css
assets/public/css/5472.45d11211.css
assets/public/css/6424.6a3c22b1.css
assets/public/css/55.7a3c7c77.css
assets/public/css/1087.302f4909.css
assets/public/css/4874.77e36225.css
assets/public/css/7943.0c69fb42.css
assets/public/css/8112.f766081b.css
assets/public/css/4010.8352163e.css
assets/public/css/1010.80521009.css
assets/public/css/6830.f5396be8.css
assets/public/css/3640.a20a0e62.css
assets/public/css/1171.181c6509.css
assets/public/css/2068.7b5edacc.css
assets/public/css/6558.512ffcb1.css
assets/public/css/7070.dd7b72ae.css
assets/public/css/5035.31d6cfe0.css
assets/public/css/209.f0db1a88.css
assets/public/css/8957.f3658c1f.css
assets/public/css/4747.fc2ee1aa.css
assets/public/css/635.fa66a6cf.css
assets/public/css/5150.746ddaee.css
assets/public/css/6622.ecbf4db6.css
assets/public/css/7466.3d476920.css
assets/public/css/9823.c659368f.css
assets/public/css/728.3cd724f7.css
assets/public/css/7642.5d6bbe27.css
assets/public/css/6524.ab27a729.css
assets/public/css/702.8b0801e4.css
assets/public/css/6711.ee666e2e.css
assets/public/css/7794.31d6cfe0.css
assets/public/css/5038.234f1051.css
assets/public/css/2537.8980d7b8.css
assets/public/css/5582.e5d7aa22.css
assets/public/css/8080.252abefc.css
assets/public/css/8307.895cded7.css
assets/public/css/6782.3d7e0795.css
assets/public/css/8455.20af573d.css
assets/public/css/4836.b4b62b6e.css
assets/public/css/7867.3ac89440.css
assets/public/css/2885.248a8d57.css
assets/public/css/5912.c0eb1bc3.css
assets/public/css/7651.e301799a.css
assets/public/css/8965.d8c3ffbc.css
assets/public/css/4669.dce8a2cc.css
assets/public/css/2542.30bab915.css
assets/public/css/9220.8079f821.css
assets/public/css/6862.472b5ce5.css
assets/public/css/9421.0c1b32b1.css
assets/public/css/3457.fff4d659.css
assets/public/css/6510.7766ec8a.css
assets/public/css/6495.9f225296.css
assets/public/css/vendor.bc8453fd.css
assets/public/css/7361.a61213c2.css
assets/public/css/8714.40ccb46e.css
assets/public/css/6050.06be3d76.css
assets/public/css/6203.ac8be3e6.css
assets/public/css/9654.43d657c0.css
assets/public/css/2491.a7a847cb.css
assets/public/css/1271.c70a8f11.css
assets/public/css/7050.f5a03ed7.css
assets/public/css/1653.61f6ad3c.css
assets/public/css/9383.e537239b.css
assets/public/css/4706.46cd6838.css
assets/public/css/app.3ce529fa.css
assets/public/css/73.e1755a94.css
assets/public/css/5364.20d209b4.css
assets/public/css/9732.7e5b07cd.css
assets/public/css/8940.1dd1a28e.css
assets/public/css/8246.c5db93c3.css
assets/public/css/3020.e10ac34f.css
assets/public/css/7130.82d949d8.css
assets/public/css/1121.af437e29.css
assets/public/css/1920.8da5021c.css
assets/public/css/2877.7616a02e.css
assets/public/css/1590.8696c566.css
assets/public/css/2827.8d4de2ba.css
assets/public/css/7993.aba8b3f8.css
assets/public/css/1151.28673df8.css
assets/public/css/3391.6e495112.css
assets/public/css/3431.487e5d11.css
assets/public/css/911.3ea78716.css
assets/public/css/300.31e335a6.css
assets/public/css/9776.829b51cc.css
assets/public/css/5448.96cc1918.css
assets/public/css/8979.ab67a4db.css
assets/public/css/3342.d15d47c5.css
assets/public/css/6538.ab92b2e7.css
assets/public/css/5124.b64c0efe.css
assets/public/css/7999.1f27e467.css
assets/public/cordova_plugins.js
assets/public/fonts/fa-brands-400.878f3125.woff2
assets/public/fonts/fa-v4compatibility.c6a0c95b.ttf
assets/public/fonts/fa-regular-400.50701fbb.ttf
assets/public/fonts/fa-solid-900.b6879d41.woff2
assets/public/fonts/flUhRq6tzZclQEJ-Vdg-IuiaDsNa.4d73cb90.woff
assets/public/fonts/KFOlCnqEu92Fr1MmSU5fBBc-.c2f7ab22.woff
assets/public/fonts/fa-regular-400.b041b1fa.woff2
assets/public/fonts/KFOmCnqEu92Fr1Mu4mxM.f1e2a767.woff
assets/public/fonts/fa-brands-400.016b4a6c.ttf
assets/public/fonts/KFOlCnqEu92Fr1MmYUtfBBc-.f5677eb2.woff
assets/public/fonts/KFOlCnqEu92Fr1MmWUlfBBc-.77ecb942.woff
assets/public/fonts/fa-solid-900.d75e3fd1.ttf
assets/public/fonts/KFOlCnqEu92Fr1MmEU9fBBc-.48af7707.woff
assets/public/fonts/KFOkCnqEu92Fr1MmgVxIIzQ.68bb21d0.woff
assets/public/fonts/flUhRq6tzZclQEJ-Vdg-IuiaDsNcIhQ8tQ.c5371cfb.woff2
assets/public/index.html
assets/dexopt/baseline.prof
assets/dexopt/baseline.profm
assets/native-bridge.js
assets/capacitor.plugins.json
assets/capacitor.config.json
org/apache/cordova/allowlist/index2.html
org/apache/cordova/allowlist/index.html
classes5.dex
classes3.dex
classes4.dex
classes.dex
assets/NzxySUVfraHu/øıΩ†ı§≈≈ø̧.∆Ω≈@≈..́ª.†O̧≈..Oª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
assets/XnbQtVXlreLvRpEpHEpPEswvdVuaZEVVoJYNUXOkJgEyUIBULzeycgvavShVyflTtqPHPfbLEDKkqjidFpqrvXGNECbvIQbvKhvzGhvPuCZgzdGFUYlXQHhislLmEtESqpTKpyvyiDlHgYVcmqBkOHxCIRXbdbgWDSXbYOeFycUrMiiumNpjylKjRgzJfZOXAsaQsZpOdlWYqOakqpLGiXMgiIeDFICpPwfUNNhVnkxyjdFbpGKIclcvMJOdolRESbGUEkttJDSZqwDbVbjLNJITjnkvNvvADMCeHQTTzQREHCETVCbrMwTSlRFKfbjVtRoAIy
META-INF/INUKOBCP.SF
META-INF/INUKOBCP.RSA
META-INF/MANIFEST.MF
污点分析
当apk较大时，代码量会很大，造成数据流图（ICFG）呈现爆炸式增长，所以该功能比较耗时，请先喝杯咖啡，耐心等待……| 规则名称 | 描述信息 | 操作 |
|---|---|---|
| 病毒分析 | 使用安卓恶意软件常用的API进行污点分析 | 开始分析 |
| 漏洞挖掘 | 漏洞挖掘场景下的污点分析 | 开始分析 |
| 隐私合规 | 隐私合规场景下的污点分析：组件内污点传播、组件间污点传播、组件与库函数之间的污点传播 | 开始分析 |
| 密码分析 | 分析加密算法是否使用常量密钥、静态初始化的向量（IV）、加密模式是否使用ECB等 | 开始分析 |
| Callback | 因为Android中系统级的Callback并不会出现显式地进行回调方法的调用，所以如果需要分析Callback方法需要在声明文件中将其声明，这里提供一份AndroidCallbacks.txt文件，里面是一些常见的原生回调接口或类，如果有特殊接口需求，可以联系管理员 | 开始分析 |