文件信息
文件名 20250523110944874692789349.apk文件大小 443.07MB
MD5值 814309ff6a5a5bf25dea7ec1975197d5
SHA1值 6baf869608d49d8c5fb8eafaedd30ee12fac0984
SHA256值 3b27bc296b3fecbac24152a0b5d4fff01bed52a60238e26e97c0a4d2571cc15b
APK信息
APK名称 My BMW包名 de.bmw.connected.mobile20.cn
主活动 com.mobileconnected.MainActivity
安卓版本名称 5.5.0
域名线索
域名 | 查询域名 | ip | 地区 | 查询地区 |
---|---|---|---|---|
ichannel.snssdk.com | 111.202.5.195 | China - Beijing | ||
xmlpull.org | 185.199.109.153 | United States of America - Pennsylvania | ||
logback.qos.ch | 195.15.222.169 | Switzerland - Geneve | ||
oss-cn-.aliyuncs.comor | 没有ip信息 | 没有地区信息 | ||
sdk.faceid.qq.com | 221.198.69.152 | China - Tianjin | ||
www.google.com | 199.16.158.182 | United States of America - California | ||
api.ximalaya.com | 101.91.133.50 | China - Shanghai | ||
10.38.162.35 | 10.38.162.35 | - - - | ||
metrics2.data.hicloud.com | 80.158.2.190 | Germany - Schleswig-Holstein | ||
applog.snssdk.com | 106.74.132.32 | China - Shandong | ||
othstr.beacon.qq.com | 140.206.162.29 | China - Shanghai | ||
data-drru.push.dbankcloud.com | 159.138.202.31 | Russian Federation - Sverdlovskaya oblast' | ||
astat.bugly.qcloud.com | 119.28.121.133 | Singapore - Singapore | ||
zxid-m.mobileservice.cn | 101.69.207.68 | China - Zhejiang | ||
gtc.getui.nethttps | 没有ip信息 | 没有地区信息 | ||
rttgpsreport.map.qq.com | 60.28.215.71 | China - Tianjin | ||
journeyapps.com | 18.65.168.85 | Japan - Tokyo | ||
image.cnamedomain.com | 没有ip信息 | 没有地区信息 | ||
android.bugly.qq.com | 124.95.225.146 | China - Liaoning | ||
testlogin.kuwo.cn | 111.206.98.20 | China - Beijing | ||
kyccdn.tencentcloudapi.com | 119.188.44.168 | China - Shandong | ||
mobilegwpre.alipay.com | 110.75.138.35 | China - Zhejiang | ||
data-dra.push.dbankcloud.com | 119.8.163.189 | Singapore - Singapore | ||
api.countly-preprod.bmwusa.com | 172.212.144.58 | United Kingdom of Great Britain and Northern Ireland - England | ||
loggw-exsdk.alipay.com | 110.76.6.82 | China - Zhejiang | ||
corssdk.map.qq.com | 116.130.220.64 | China - Beijing | ||
developer.android.com | 142.250.217.78 | United States of America - California | ||
grs.platform.dbankcloud.ru | 没有ip信息 | 没有地区信息 | ||
realm.io | 3.173.219.44 | United States of America - Washington | ||
mclient.alipay.com | 218.61.164.134 | China - Liaoning | ||
toblog-alink.ctobsnssdk.com | 42.56.93.211 | China - Liaoning | ||
mt.map.qq.com | 116.130.223.114 | China - Beijing | ||
b-gtc.getui.nethttps | 没有ip信息 | 没有地区信息 | ||
idasc-kyc-test.tencentcloudapi.com | 123.207.114.133 | China - Beijing | ||
111.230.161.197 | 111.230.161.197 | China - Beijing | ||
www.opengis.net | 217.154.231.107 | United Kingdom of Great Britain and Northern Ireland - England | ||
api.countly-preprod.bmwgroup.com | 4.184.156.158 | Germany - Hessen | ||
docs.mongodb.com | 15.197.167.90 | United States of America - Washington | ||
www.example.com | 92.122.244.33 | Germany - Hessen | ||
ocr.tencentcloudapi.com | 120.53.72.73 | China - Beijing | ||
mp.weixin.qq.com | 140.207.176.25 | China - Shanghai | ||
long.open.weixin.qq.com | 112.65.193.150 | China - Shanghai | ||
cs.map.qq.com | 125.36.181.143 | China - Tianjin | ||
xml.org | 104.239.142.8 | United States of America - Texas | ||
apis.map.qq.com | 116.130.223.114 | China - Beijing | ||
api.test.ximalaya.com | 10.146.3.40 | - - - | ||
cn.register.xmpush.xiaomi.com | 221.194.179.52 | China - Hebei | ||
grs.dbankcloud.com | 60.28.200.159 | China - Tianjin | ||
sdk-open-phone.getui.com | 124.160.155.42 | China - Zhejiang | ||
zxid.mobileservice.cn | 101.69.207.69 | China - Zhejiang | ||
oss-cn-hangzhou.aliyuncs.com | 118.31.219.236 | China - Zhejiang | ||
api.flutter.dev | 199.36.158.100 | United States of America - California | ||
www.w3.org | 104.18.22.19 | United States of America - California | ||
mobilegw.dl.alipaydev.com | 110.75.132.25 | China - Zhejiang | ||
pub.dev | 34.36.0.14 | United States of America - Missouri | ||
metrics5.dt.dbankcloud.ru | 159.138.203.215 | Russian Federation - Sverdlovskaya oblast' | ||
databyterangers.com.cn | 没有ip信息 | 没有地区信息 | ||
miniprogram-kyc.tencentcloudapi.com | 193.112.232.253 | China - Beijing | ||
github.com | 20.205.243.166 | Singapore - Singapore | ||
tdid.m.qq.com | 60.29.240.40 | China - Tianjin | ||
metrics-dra.dt.hicloud.com | 94.74.88.100 | Singapore - Singapore | ||
int-b2vapi.bmwgroup.com | 160.46.225.136 | Germany - Bayern | ||
open.weixin.qq.com | 140.207.176.25 | China - Shanghai | ||
data-dre.push.dbankcloud.com | 80.158.49.244 | Germany - Schleswig-Holstein | ||
testdatalbs.sparta.html5.qq.com | 157.255.4.30 | China - Guangdong | ||
h5app.kuwo.cn | 116.196.151.15 | China - Zhejiang | ||
lstest.map.qq.com | 220.194.120.95 | China - Tianjin | ||
metrics1-drcn.dt.dbankcloud.cn | 111.202.16.252 | China - Beijing | ||
api.countly.bmw.com.cn | 143.64.73.11 | China - Hebei | ||
play.google.com | 46.82.174.69 | Germany - Niedersachsen | ||
en.wikipedia.org | 31.13.94.37 | Argentina - Ciudad Autonoma de Buenos Aires | ||
grs.dbankcloud.cn | 49.4.40.185 | China - Guangdong | ||
kycwa.tencentcloudapi.com | 42.193.129.244 | China - Beijing | ||
log.snssdk.com | 42.56.93.209 | China - Liaoning | ||
c-gtc.getui.nethttps | 没有ip信息 | 没有地区信息 | ||
test-wbd.kuwo.cn | 111.206.98.20 | China - Beijing | ||
m.test.ximalaya.com | 10.146.3.14 | - - - | ||
digitalkeypairing.org | 34.210.173.62 | United States of America - Oregon | ||
music.163.com | 220.197.30.65 | China - Jiangsu | ||
www.tencentcloud.com | 43.175.52.13 | Hong Kong - Hong Kong | ||
mobilegw.alipay.com | 203.209.243.27 | China - Zhejiang | ||
issuetracker.google.com | 142.250.217.110 | United States of America - California | ||
data-drcn.push.dbankcloud.com | 118.194.33.160 | China - Shanghai | ||
i.y.qq.com | 140.206.162.227 | China - Shanghai | ||
rtapplog.snssdk.com | 123.6.21.191 | China - Henan | ||
manual.sensorsdata.cn | 61.182.131.226 | China - Hebei | ||
astat.bugly.cros.wr.pvp.net | 170.106.118.26 | United States of America - California | ||
m.ximalaya.com | 101.91.133.109 | China - Shanghai | ||
h5app-test.kuwo.cn | 119.188.149.190 | China - Shandong | ||
rtlog.snssdk.com | 106.74.132.32 | China - Shandong | ||
www.hyphenation.org | 46.4.94.215 | Germany - Bayern | ||
analytics.map.qq.com | 125.36.181.143 | China - Tianjin | ||
miniprogram-kyc-test.tencentcloudapi.com | 123.207.114.133 | China - Beijing | ||
eadrax-bmw-na-dly-65732.firebaseio.com55https | 没有ip信息 | 没有地区信息 | ||
b2vapi.bmwgroup.com | 160.46.245.252 | Germany - Bayern | ||
metrics5.data.hicloud.com | 159.138.203.215 | Russian Federation - Sverdlovskaya oblast' | ||
api.countly.bmwgroup.com | 4.184.67.169 | Germany - Hessen | ||
apmplus.volces.com | 125.39.135.101 | China - Tianjin | ||
lbs-trpc.map.qq.com | 116.130.224.82 | China - Beijing | ||
confinfo.map.qq.com | 116.130.223.83 | China - Beijing | ||
h.trace.qq.com | 113.56.189.246 | China - Hubei | ||
wbd.kuwo.cn | 111.206.98.20 | China - Beijing | ||
docs.flutter.dev | 199.36.158.100 | United States of America - California | ||
mcgw.alipay.com | 111.202.5.210 | China - Beijing | ||
wappaygw.alipay.com | 111.202.5.209 | China - Beijing | ||
lbs6.map.qq.com | 116.130.220.102 | China - Beijing | ||
grs.dbankcloud.asia | 49.4.40.185 | China - Guangdong | ||
otheve.beacon.qq.com | 113.56.189.125 | China - Hubei | ||
d-gt.getui.com | 没有ip信息 | 没有地区信息 | ||
oss.aliyuncs.com | 118.178.29.5 | China - Zhejiang | ||
eadrax-bmw-na-dly-65732.firebaseio.com | 35.201.97.85 | United States of America - Missouri | ||
c-hzgt2.getui.com | 124.160.155.59 | China - Zhejiang | ||
api.countly.bmwusa.com | 172.212.178.219 | United Kingdom of Great Britain and Northern Ireland - England | ||
nisportal.10010.com | 124.64.196.20 | China - Beijing | ||
api.countly-preprod.bmw.com.cn | 143.64.49.130 | China - Hebei | ||
idasc-kyc.tencentcloudapi.com | 193.112.232.253 | China - Beijing | ||
www.apache.org | 151.101.2.132 | United States of America - California | ||
apm.volccdn.com | 123.6.149.140 | China - Henan | ||
127.0.0.1 | 127.0.0.1 | - - - | ||
resolver.msg.xiaomi.net | 110.43.0.169 | China - Beijing | ||
attest.approoval.com | 34.49.166.75 | United States of America - California | ||
h5.m.taobao.com | 60.9.1.94 | China - Hebei | ||
nlp.map.qq.com | 116.130.220.102 | China - Beijing | ||
im-int-api.lingyue-digital.com | 59.110.247.198 | China - Beijing | ||
grs.dbankcloud.eu | 没有ip信息 | 没有地区信息 | ||
mon.snssdk.com | 111.161.204.190 | China - Tianjin | ||
i.kuwo.cn | 111.206.98.20 | China - Beijing | ||
developer.mozilla.org | 34.111.97.67 | United States of America - Missouri | ||
mobilegw.alipaydev.com | 110.75.132.131 | China - Zhejiang | ||
www.slf4j.org | 195.15.222.169 | Switzerland - Geneve |
URL线索
邮箱线索
邮箱地址 | 所在文件 |
---|---|
try_loyalty_purchase@3x.webp |
摸瓜V2引擎 |
phone-rsu-darkmode@3x.webp |
摸瓜V2引擎 |
phone-rsu-lightmode@3x.webp |
摸瓜V2引擎 |
ent-modal-banner-bmw@3x.webp |
摸瓜V2引擎 |
nt-modal-banner-mini@3x.webp |
摸瓜V2引擎 |
interiorid7@2x.webp |
摸瓜V2引擎 |
interiorid8c@2x.webp |
摸瓜V2引擎 |
caextendedwarranty@2x.webp |
摸瓜V2引擎 |
cawarranty@2x.webp |
摸瓜V2引擎 |
18@2x.webp |
摸瓜V2引擎 |
1@2x.webp |
摸瓜V2引擎 |
2@2x.webp |
摸瓜V2引擎 |
3@2x.webp |
摸瓜V2引擎 |
4@2x.webp |
摸瓜V2引擎 |
5@2x.webp |
摸瓜V2引擎 |
6@2x.webp |
摸瓜V2引擎 |
7@2x.webp |
摸瓜V2引擎 |
8@2x.webp |
摸瓜V2引擎 |
9@2x.webp |
摸瓜V2引擎 |
10@2x.webp |
摸瓜V2引擎 |
11@2x.webp |
摸瓜V2引擎 |
12@2x.webp |
摸瓜V2引擎 |
13@2x.webp |
摸瓜V2引擎 |
14@2x.webp |
摸瓜V2引擎 |
15@2x.webp |
摸瓜V2引擎 |
16@2x.webp |
摸瓜V2引擎 |
17@2x.webp |
摸瓜V2引擎 |
19@2x.webp |
摸瓜V2引擎 |
20@2x.webp |
摸瓜V2引擎 |
21@2x.webp |
摸瓜V2引擎 |
22@2x.webp |
摸瓜V2引擎 |
23@2x.webp |
摸瓜V2引擎 |
24@2x.webp |
摸瓜V2引擎 |
25@2x.webp |
摸瓜V2引擎 |
26@2x.webp |
摸瓜V2引擎 |
27@2x.webp |
摸瓜V2引擎 |
28@2x.webp |
摸瓜V2引擎 |
cheng.cui@partner.bmw |
摸瓜V2引擎 |
siman.chuan@partner.bmw |
摸瓜V2引擎 |
手机线索
手机号 | 所在文件 |
---|---|
13222222222 |
bv/p2.java |
14222222222 |
bv/p2.java |
17146314752 |
j70/j.java |
17512775099 |
pm/a.java |
13129340006 |
v70/g.java |
15311520693 |
lib/arm64-v8a/libYTImageRefinerPub.so |
15713703727 |
lib/arm64-v8a/libYTImageRefinerPub.so |
13755503429 |
lib/arm64-v8a/libYTImageRefinerPub.so |
18988633568 |
lib/arm64-v8a/libYTImageRefinerPub.so |
15735274653 |
lib/arm64-v8a/libapp.so |
14736395667 |
lib/arm64-v8a/libapp.so |
14603134346 |
lib/arm64-v8a/libapp.so |
17461238838 |
lib/arm64-v8a/libapp.so |
14083424482 |
lib/arm64-v8a/libapp.so |
14054271516 |
lib/arm64-v8a/libapp.so |
16360377347 |
lib/arm64-v8a/libapp.so |
15866282137 |
lib/arm64-v8a/libapp.so |
13272299608 |
lib/arm64-v8a/libapp.so |
14521158961 |
lib/arm64-v8a/libapp.so |
15220060793 |
lib/arm64-v8a/libapp.so |
16634220692 |
lib/arm64-v8a/libapp.so |
18303205052 |
lib/arm64-v8a/libapp.so |
18219420711 |
lib/arm64-v8a/libapp.so |
13866236427 |
lib/arm64-v8a/libapp.so |
14463071505 |
lib/arm64-v8a/libapp.so |
17050179402 |
lib/arm64-v8a/libapp.so |
17842439106 |
lib/arm64-v8a/libapp.so |
13526311248 |
lib/arm64-v8a/libapp.so |
13928158214 |
lib/arm64-v8a/libapp.so |
16773195083 |
lib/arm64-v8a/libapp.so |
17307014824 |
lib/arm64-v8a/libapp.so |
18291378369 |
lib/arm64-v8a/libapp.so |
15612168314 |
lib/arm64-v8a/libapp.so |
15402316060 |
lib/arm64-v8a/libapp.so |
14948291004 |
lib/arm64-v8a/libapp.so |
18038034181 |
lib/arm64-v8a/libapp.so |
17940498824 |
lib/arm64-v8a/libapp.so |
16541071428 |
lib/arm64-v8a/libapp.so |
13616389093 |
lib/arm64-v8a/libapp.so |
13581355212 |
lib/arm64-v8a/libapp.so |
15607138198 |
lib/arm64-v8a/libapp.so |
签名证书
APK已签名
v1 签名: True
v2 签名: True
v3 签名: False
找到 1 个唯一证书
主题: C=Unknown, ST=Unknown, L=Unknown, O=Unknown, OU=Unknown, CN=Unknown
签名算法: rsassa_pkcs1v15
有效期自: 2020-07-02 10:04:52+00:00
有效期至: 2047-11-18 10:04:52+00:00
发行人: C=Unknown, ST=Unknown, L=Unknown, O=Unknown, OU=Unknown, CN=Unknown
序列号: 0x4a8d0ac3
哈希算法: sha256
md5值: 7b2de4f9952910daa92313fbe89f03f2
sha1值: 767d9ed693b4ce11cd5c399b2da395c1a95044ef
sha256值: 2416a50735c83d18dd7589ac76b2521b3cf88286a15afecd998dd8dbc4f9893c
sha512值: 09ea13e52992c0346e2524a12173b3e219f6ca3f459a35b8996c0072cf5950fd11562d09eafff40141e4f838cd30ebef63199459ace70983a59eaaf8bc693f12
公钥算法: rsa
密钥长度: 2048
指纹: 408d7cef296779e6c3208f3a42630cd49bf8136a7c4b49dc15f566dde96ca17b
硬编码敏感信息
"auth_failure_token_failuer" : "The network is unstable, please retry."
"firebase_database_url" : "https://eadrax-bmw-na-dly-65732.firebaseio.com"
"google_api_key" : "AIzaSyAlCUWiGaWXA2eWeTJlHrgiqClJco9T_2c"
"google_crash_reporting_api_key" : "AIzaSyAlCUWiGaWXA2eWeTJlHrgiqClJco9T_2c"
"library_zxingandroidembedded_author" : "JourneyApps"
"library_zxingandroidembedded_authorWebsite" : "https://journeyapps.com/"
"auth_failure_token_failuer" : "网络异常,请重试。"
加壳分析
第三方插件
危险动作
向手机申请的权限 | 是否危险 | 类型 | 详细情况 |
---|---|---|---|
android.permission.WRITE_EXTERNAL_STORAGE | 危险 | 读取/修改/删除外部存储内容 | 允许应用程序写入外部存储 |
android.permission.INTERNET | 正常 | 互联网接入 | 允许应用程序创建网络套接字 |
android.permission.ACCESS_NETWORK_STATE | 正常 | 查看网络状态 | 允许应用程序查看所有网络的状态 |
android.permission.USE_BIOMETRIC | 正常 | 允许应用使用设备支持的生物识别模式。 | |
android.permission.ACCESS_FINE_LOCATION | 危险 | 精细定位(GPS) | 访问精细位置源,例如手机上的全球定位系统,如果可用。恶意应用程序可以使用它来确定您的位置,并可能消耗额外的电池电量 |
android.permission.ACCESS_COARSE_LOCATION | 危险 | 粗定位 | 访问粗略位置源,例如移动网络数据库,以确定大概的电话位置(如果可用)。恶意应用程序可以使用它来确定您的大致位置 |
android.permission.CAMERA | 危险 | 拍照和录像 | 允许应用程序用相机拍照和录像。这允许应用程序收集相机随时看到的图像 |
android.permission.READ_EXTERNAL_STORAGE | 危险 | 读取外部存储器内容 | 允许应用程序从外部存储读取 |
android.permission.VIBRATE | 正常 | 可控震源 | 允许应用程序控制振动器 |
android.permission.POST_NOTIFICATIONS | 未知 | 调用了未知的操作 | |
android.permission.READ_MEDIA_IMAGES | 未知 | 调用了未知的操作 | |
android.permission.BLUETOOTH | 正常 | 创建蓝牙连接 | 允许应用程序连接到配对的蓝牙设备 |
android.permission.BLUETOOTH_ADMIN | 正常 | 蓝牙管理 | 允许应用程序发现和配对蓝牙设备。 |
android.permission.BLUETOOTH_CONNECT | 未知 | 调用了未知的操作 | |
com.google.android.gms.dck.permission.DIGITAL_KEY_READ | 未知 | 调用了未知的操作 | |
com.google.android.gms.dck.permission.DIGITAL_KEY_WRITE | 未知 | 调用了未知的操作 | |
org.carconnectivity.android.digitalkey.permission.DIGITAL_KEY_WRITE | 未知 | 调用了未知的操作 | |
org.carconnectivity.android.digitalkey.permission.DIGITAL_KEY_READ | 未知 | 调用了未知的操作 | |
android.permission.BLUETOOTH_SCAN | 未知 | 调用了未知的操作 | |
android.permission.NFC | 正常 | 控制近场通信 | 允许应用程序与近场通信 (NFC) 标签,卡和读卡器进行通信 |
android.permission.RECORD_AUDIO | 危险 | 录音 | 允许应用程序访问音频记录路径 |
android.permission.READ_MEDIA_VIDEO | 未知 | 调用了未知的操作 | |
android.permission.READ_MEDIA_AUDIO | 未知 | 调用了未知的操作 | |
ANDROID.PERMISSION.CAMERA | 未知 | 调用了未知的操作 | |
android.permission.ACCESS_WIFI_STATE | 正常 | 查看Wi-Fi状态 | 允许应用程序查看有关 Wi-Fi 状态的信息 |
android.permission.ACCESS_MEDIA_LOCATION | 危险 | 访问的任何地理位置 | 允许应用程序访问的任何地理位置持久保存在用户的共享集合 |
android.permission.FLASHLIGHT | 正常 | 控制手电筒 | 允许应用程序控制手电筒 |
android.permission.CHANGE_WIFI_STATE | 正常 | 更改Wi-Fi状态 | 允许应用程序连接和断开 Wi-Fi 接入点,并对配置的 Wi-Fi 网络进行更改 |
android.permission.CHANGE_NETWORK_STATE | 正常 | 更改网络连接 | 允许应用程序更改网络连接状态。 |
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS | 正常 | 访问额外的位置提供程序命令 | 访问额外的位置提供程序命令,恶意应用程序可能会使用它来干扰 GPS 或其他位置源的操作 |
android.permission.FOREGROUND_SERVICE | 正常 | 允许常规应用程序使用 Service.startForeground。 | |
android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE | 未知 | 调用了未知的操作 | |
android.permission.WAKE_LOCK | 正常 | 防止手机睡眠 | 允许应用程序防止手机进入睡眠状态 |
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK | 未知 | 调用了未知的操作 | |
android.permission.USE_FINGERPRINT | 正常 | allow use of指纹 | 该常量在 API 级别 28 中已被弃用。应用程序应改为请求 USE_BIOMETRIC |
de.bmw.connected.mobile20.cn.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | 未知 | 调用了未知的操作 | |
com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE | 未知 | 调用了未知的操作 | |
com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE | 未知 | 调用了未知的操作 | |
android.permission.SCHEDULE_EXACT_ALARM | 正常 | 允许应用程序使用精确的警报调度 API 来执行对时间敏感的后台工作 | |
getui.permission.GetuiService.de.bmw.connected.mobile20.cn | 未知 | 调用了未知的操作 | |
com.vivo.notification.permission.BADGE_ICON | 未知 | 调用了未知的操作 | |
de.bmw.connected.mobile20.cn.permission.MIPUSH_RECEIVE | 未知 | 调用了未知的操作 | |
de.bmw.connected.mobile20.cn.permission.PROCESS_PUSH_MSG | 未知 | 调用了未知的操作 | |
de.bmw.connected.mobile20.cn.permission.PUSH_PROVIDER | 未知 | 调用了未知的操作 | |
org.carconnectivity.android.digitalkey.permission.DIGITAL_KEY_PRIVILEGED | 未知 | 调用了未知的操作 | |
com.hihonor.push.permission.READ_PUSH_NOTIFICATION_INFO | 未知 | 调用了未知的操作 | |
com.asus.msa.SupplementaryDID.ACCESS | 未知 | 调用了未知的操作 |