温馨提示：APP静态检测会有结果不完整的现象，如有疑问或建议， 可加入我们的微信群讨论
文件信息
文件名 ttts002_2024.10.12.400.apk文件大小 11.12MB
MD5值 912a0cc0afad73fa5eba219fb8b266f8
SHA1值 347e6eb5a22b842cad4fc9bb897026d1de4c1ce9
SHA256值 e474202ed80da5970c085e298fb37bc7dbdf642fb9c84439ad0e46903889ebd7
APK信息
APK名称 TT包名 com.zq.tt
主活动 com.zq.douyin.MainActivity
安卓版本名称 1.1.1
域名线索
| 域名 | 查询域名 | ip | 地区 | 查询地区 |
|---|---|---|---|---|
| jsperf.com | 104.16.228.18 | United States of America - California | ||
| issues.apache.org | 168.119.33.54 | Germany - Bayern | ||
| d3n2vdp1h9ohbb.cloudfront.net | 3.165.16.143 | United States of America - Washington | ||
| pan.baidu.com | 110.242.69.176 | China - Hebei | ||
| www.w3.org | 104.18.22.19 | United States of America - California | ||
| cres.rpp913.com | 43.252.172.20 | Hong Kong - Hong Kong | ||
| kk.xcdwt.com | 103.190.125.132 | Hong Kong - Hong Kong | ||
| cdn.plyr.io | 104.27.194.88 | United States of America - California | ||
| cdn.jsdelivr.net | 104.18.187.31 | United States of America - California | ||
| vimeo.com | 199.59.148.96 | United States of America - California | ||
| html2canvas.hertzen.com | 172.67.140.170 | United States of America - California | ||
| lf3-cdn-tos.bdxiguastatic.com | 42.56.65.217 | China - Liaoning | ||
| swiperjs.comn | 没有ip信息 | 没有地区信息 | ||
| 101.132.69.237 | 101.132.69.237 | China - Shanghai | ||
| brianleroux.github.com | 185.199.111.153 | United States of America - Pennsylvania | ||
| douying.uk | 没有ip信息 | 没有地区信息 | ||
| aomedia.org | 185.199.111.153 | United States of America - Pennsylvania | ||
| github.com | 20.205.243.166 | Singapore - Singapore | ||
| raw.githubusercontent.com | 0.0.0.0 | - - - | ||
| noembed.com | 151.101.193.91 | United States of America - California | ||
| hertzen.com | 172.67.140.170 | United States of America - California | ||
| img01.yzcdn.cn | 221.15.70.53 | China - Henan | ||
| www.youtube.com | 31.13.88.26 | Ireland - Dublin | ||
| ldy.sc618.cc | 43.242.130.54 | Hong Kong - Hong Kong | ||
| go.aniview.com | 23.52.216.219 | Argentina - Ciudad Autonoma de Buenos Aires | ||
| t.me | 149.154.167.99 | United Kingdom of Great Britain and Northern Ireland - England | ||
| player.vimeo.com | 199.16.158.12 | United States of America - California | ||
| i.ytimg.com | 104.31.142.88 | Germany - Hamburg | ||
| imasdk.googleapis.com | 114.250.67.33 | China - Beijing | ||
| axios-http.com | 13.215.144.61 | Singapore - Singapore | ||
| www.youtube-nocookie.com | 199.59.148.96 | United States of America - California | ||
| developer.mozilla.org | 34.111.97.67 | United States of America - Missouri | ||
| hfive.qsxon.com | 172.67.140.97 | United States of America - California | ||
| www.apache.org | 151.101.2.132 | United States of America - California | ||
| bk.dlkxi.cc | 154.86.26.8 | Hong Kong - Hong Kong | ||
| 43.231.0.225 | 43.231.0.225 | Hong Kong - Hong Kong | ||
| 34.150.33.40 | 34.150.33.40 | Hong Kong - Hong Kong |
URL线索
邮箱线索
| 邮箱地址 | 所在文件 |
|---|---|
|
solderzzc@gmail.com |
摸瓜V2引擎 |
|
stefano.magrassi@gmail.com |
摸瓜V2引擎 |
|
sy12god@gmail.com |
摸瓜V2引擎 |
|
git@github.com |
摸瓜V2引擎 |
|
fedor@indutny.com |
摸瓜V2引擎 |
手机线索
| 手机号 | 所在文件 |
|---|---|
|
16428979324 |
defpackage/xh.java |
|
13176625430 |
defpackage/wb.java |
|
13765097263 |
defpackage/oi.java |
|
16103317719 |
defpackage/b9.java |
|
18963844729 |
defpackage/hp.java |
|
16436526035 |
defpackage/sa.java |
|
16517614141 |
defpackage/fs.java |
|
19919152923 |
摸瓜V2引擎 |
签名证书
APK已签名
v1 签名: True
v2 签名: True
v3 签名: True
找到 1 个唯一证书
主题: C=xx, ST=xx, L=xx, O=XX, OU=xx, CN=xx.com
签名算法: rsassa_pkcs1v15
有效期自: 2024-10-12 00:28:44+00:00
有效期至: 2052-02-28 00:28:44+00:00
发行人: C=xx, ST=xx, L=xx, O=XX, OU=xx, CN=xx.com
序列号: 0x6289a676
哈希算法: sha256
md5值: f7db3156b0262aa56420ecf3bc0f6850
sha1值: ed3a0f295892dcdeca55c8065383002bf18518e7
sha256值: fd2c2c95a37577b84786f376a3971b34f330c1f16850945ba2e36e5cbde71006
sha512值: 23eec388647bef6104b6dfc67724d494f09f49bee04e7ab152ebf5c777e21ad749165204cd236d40f3092c9be2d37a4e208b375b76ca937d2008e52c6bd250eb
公钥算法: rsa
密钥长度: 2048
指纹: 63a48480e01c9c97cd5a4c62e978be3ae599acc2763cd6f97c90fe17b60fd93f硬编码敏感信息
加壳分析
第三方插件
危险动作
| 向手机申请的权限 | 是否危险 | 类型 | 详细情况 |
|---|---|---|---|
| android.permission.INTERNET | 正常 | 互联网接入 | 允许应用程序创建网络套接字 |
| android.permission.ACCESS_NETWORK_STATE | 正常 | 查看网络状态 | 允许应用程序查看所有网络的状态 |
| android.permission.ACCESS_WIFI_STATE | 正常 | 查看Wi-Fi状态 | 允许应用程序查看有关 Wi-Fi 状态的信息 |
| android.permission.WRITE_EXTERNAL_STORAGE | 危险 | 读取/修改/删除外部存储内容 | 允许应用程序写入外部存储 |
| android.permission.REQUEST_INSTALL_PACKAGES | 危险 | 允许应用程序请求安装包。 | 恶意应用程序可以利用它来尝试诱骗用户安装其他恶意软件包。 |
| android.permission.READ_EXTERNAL_STORAGE | 危险 | 读取外部存储器内容 | 允许应用程序从外部存储读取 |