温馨提示:APP静态检测会有结果不完整的现象,如有疑问或建议, 可加入我们的微信群讨论
文件信息
文件名 ezpay.apk文件大小 42.34MB
MD5值 dd25f08b373449257300e61249336211
SHA1值 be7481f174a23b748096ce3a180fe68d0018b8e8
SHA256值 035f5c3f49e43084bc3023df6ea066364ee795e956afee3bba5dc0d46a993f41
APK信息
APK名称 EZpay包名 com.flying.p96.normal
主活动 com.flying.p96.MainActivity
安卓版本名称 2.0.3-normal
域名线索
域名 | 查询域名 | ip | 地区 | 查询地区 |
---|---|---|---|---|
uatproxy.caplw.com | 104.18.203.224 | United States of America - California | ||
www.jsdelivr.com | 104.21.23.24 | United States of America - California | ||
www.w3.org | 104.18.22.19 | United States of America - California | ||
grs.dbankcloud.eu | 没有ip信息 | 没有地区信息 | ||
stg-m.luckywlt.net | 154.38.203.10 | Hong Kong - Hong Kong | ||
m.luckywlt.com | 154.38.203.10 | Hong Kong - Hong Kong | ||
grs.dbankcloud.cn | 49.4.40.185 | China - Guangdong | ||
flutter.dev | 199.36.158.100 | United States of America - California | ||
stg-proxy.capluckywlt.com | 43.175.130.182 | Singapore - Singapore | ||
stg-m.luckywlt.com | 154.38.203.10 | Hong Kong - Hong Kong | ||
34.96.232.46 | 34.96.232.46 | Hong Kong - Hong Kong | ||
www.tensorflow.org | 142.251.33.78 | Canada - Ontario | ||
uatproxy.capluckywlt.com | 104.18.203.224 | United States of America - California | ||
journeyapps.com | 216.137.39.33 | United States of America - California | ||
api.flutter.dev | 199.36.158.100 | United States of America - California | ||
proxy.capluckywlt.com | 43.175.130.182 | Singapore - Singapore | ||
grs.dbankcloud.com | 60.28.193.195 | China - Tianjin | ||
public-capital-lucky-proxy-fat.k8s-fat.com | 没有ip信息 | 没有地区信息 | ||
api.capeleph.com | 10.227.5.18 | - - - | ||
www.example.com | 23.48.5.17 | Japan - Osaka | ||
proxy.caplw.com | 43.175.130.182 | Singapore - Singapore | ||
developer.android.com | 142.250.73.142 | United States of America - California | ||
34.92.108.46 | 34.92.108.46 | Hong Kong - Hong Kong | ||
github.com | 20.205.243.166 | Singapore - Singapore | ||
grs.dbankcloud.asia | 49.4.35.251 | China - Guangdong | ||
plus.google.com | 173.252.88.133 | United States of America - Illinois |
URL线索
邮箱线索
邮箱地址 | 所在文件 |
---|---|
u0013android@android.com0 |
a2/v.java |
u0013android@android.com |
a2/v.java |
android-sdk-releaser@vopo7.prod |
lib/arm64-v8a/libbarhopper_v3.so |
appro@openssl.org |
lib/arm64-v8a/libflutter.so |
_cookie@13463476.fromsetcoo |
lib/armeabi-v7a/libapp.so |
authenticationscheme@13463476.fromstring |
lib/armeabi-v7a/libapp.so |
_list@0150898.of |
lib/armeabi-v7a/libapp.so |
_httpparser@13463476.responsepa |
lib/armeabi-v7a/libapp.so |
_list@0150898.generate |
lib/armeabi-v7a/libapp.so |
_typeerror@0150898._create |
lib/armeabi-v7a/libapp.so |
_hashcollisionnode@60137193.fromcollis |
lib/armeabi-v7a/libapp.so |
_list@0150898._ofgrowabl |
lib/armeabi-v7a/libapp.so |
_list@0150898._ofefficie |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._ofarray |
lib/armeabi-v7a/libapp.so |
_double@0150898.fromintege |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._literal3 |
lib/armeabi-v7a/libapp.so |
_future@4048458.immediate |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._literal |
lib/armeabi-v7a/libapp.so |
channelcontroller@37156646.implementa |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._ofother |
lib/armeabi-v7a/libapp.so |
_link@14069316.fromrawpat |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898.withcapaci |
lib/armeabi-v7a/libapp.so |
_timer@1026248._internal |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._literal6 |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._literal5 |
lib/armeabi-v7a/libapp.so |
_receiveportimpl@1026248.fromrawrec |
lib/armeabi-v7a/libapp.so |
_list@0150898._ofarray |
lib/armeabi-v7a/libapp.so |
_timer@1026248.periodic |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._literal2 |
lib/armeabi-v7a/libapp.so |
_bigintimpl@0150898.from |
lib/armeabi-v7a/libapp.so |
_list@0150898.empty |
lib/armeabi-v7a/libapp.so |
_list@0150898._ofother |
lib/armeabi-v7a/libapp.so |
_bytebuffer@7027147._new |
lib/armeabi-v7a/libapp.so |
_directory@14069316.fromrawpat |
lib/armeabi-v7a/libapp.so |
_invocationmirror@0150898._withtype |
lib/armeabi-v7a/libapp.so |
ngstreamsubscription@4048458.zoned |
lib/armeabi-v7a/libapp.so |
_assertionerror@0150898._create |
lib/armeabi-v7a/libapp.so |
_nativesocket@14069316.normal |
lib/armeabi-v7a/libapp.so |
_compressednode@60137193.single |
lib/armeabi-v7a/libapp.so |
_uri@0150898.file |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._literal1 |
lib/armeabi-v7a/libapp.so |
_uri@0150898.directory |
lib/armeabi-v7a/libapp.so |
androidstorage@35339836.implementa |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._literal8 |
lib/armeabi-v7a/libapp.so |
_file@14069316.fromrawpat |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._literal4 |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._ofgrowabl |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898.of |
lib/armeabi-v7a/libapp.so |
channelcontroller@29195533.implementa |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898.generate |
lib/armeabi-v7a/libapp.so |
_uri@0150898.notsimple |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._literal7 |
lib/armeabi-v7a/libapp.so |
_growablelist@0150898._ofefficie |
lib/armeabi-v7a/libapp.so |
_future@4048458.immediatee |
lib/armeabi-v7a/libapp.so |
android-sdk-releaser@vopo7.prod |
lib/armeabi-v7a/libbarhopper_v3.so |
android-sdk-releaser@vopo7.prod |
lib/x86/libbarhopper_v3.so |
android-sdk-releaser@vopo7.prod |
lib/x86_64/libbarhopper_v3.so |
appro@openssl.org |
lib/x86_64/libflutter.so |
手机线索
签名证书
APK已签名
v1 签名: True
v2 签名: True
v3 签名: False
找到 1 个唯一证书
主题: C=333, ST=mn, L=ph, O=it, OU=zf, CN=flying
签名算法: rsassa_pkcs1v15
有效期自: 2024-07-27 01:32:13+00:00
有效期至: 2051-12-13 01:32:13+00:00
发行人: C=333, ST=mn, L=ph, O=it, OU=zf, CN=flying
序列号: 0x66fbdf51f605ee9
哈希算法: sha384
md5值: 2b3c8fd2290cb426699d81eae4405acc
sha1值: 3276633e5da499648dc5c5838824830b0883605a
sha256值: be40c1af20c3c6d2f4f86f1dbb8bab075773d6adb86165a8eb7545bf1bf9dcf6
sha512值: 5c8da6edd36f6751b86baf270d3289b34b1f7813aa61dfbc7562ba61b2d58e0d4ba09de12e32fb72efd5f95f3fffdde0766109ed84ab0c4fe02d917601a4053d
公钥算法: rsa
密钥长度: 2048
指纹: 9e559edb2675ae019b509be8dbd2077d0494fb74777d501c7f266336a4cbf668
硬编码敏感信息
"library_zxingandroidembedded_author" : "JourneyApps"
"library_zxingandroidembedded_authorWebsite" : "https://journeyapps.com/"
加壳分析
第三方插件
危险动作
向手机申请的权限 | 是否危险 | 类型 | 详细情况 |
---|---|---|---|
android.permission.CAMERA | 危险 | 拍照和录像 | 允许应用程序用相机拍照和录像。这允许应用程序收集相机随时看到的图像 |
android.permission.USE_BIOMETRIC | 正常 | 允许应用使用设备支持的生物识别模式。 | |
android.permission.USE_FINGERPRINT | 正常 | allow use of指纹 | 该常量在 API 级别 28 中已被弃用。应用程序应改为请求 USE_BIOMETRIC |
android.permission.READ_EXTERNAL_STORAGE | 危险 | 读取外部存储器内容 | 允许应用程序从外部存储读取 |
android.permission.WRITE_EXTERNAL_STORAGE | 危险 | 读取/修改/删除外部存储内容 | 允许应用程序写入外部存储 |
android.permission.READ_PHONE_STATE | 危险 | 读取电话状态和身份 | 允许应用访问设备的电话功能。具有此权限的应用程序可以确定此电话的电话号码和序列号,呼叫是否处于活动状态,呼叫所连接的号码等 |
android.permission.INTERNET | 正常 | 互联网接入 | 允许应用程序创建网络套接字 |
android.permission.ACCESS_NETWORK_STATE | 正常 | 查看网络状态 | 允许应用程序查看所有网络的状态 |
android.permission.RECORD_AUDIO | 危险 | 录音 | 允许应用程序访问音频记录路径 |
android.permission.VIBRATE | 正常 | 可控震源 | 允许应用程序控制振动器 |
com.flying.p96.normal.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | 未知 | 调用了未知的操作 |