温馨提示:APP静态检测会有结果不完整的现象,如有疑问或建议, 可加入我们的微信群讨论

APP图标



下载APP

文件信息

文件名 xp_xpCarOOBE.apk
文件大小 55.58MB
MD5值 37b17f33f02e8a8e441d5377918fc3cf
SHA1值 b5465ce0a4fa8b6d702fea624106c612fc3afad2
SHA256值 f42d2f7c4d0d25ca0e431d5ede37eed8d518770146c56b6c9f460cd0befa42f7

APK信息

APK名称 xpCarOOBE
包名 com.xiaopeng.oobe
主活动 com.xiaopeng.oobe.OOBEActivity
安卓版本名称 VV6.0.0_20250625144222_Release
域名线索 29 条
查看
URL线索 15 条
查看
邮箱线索 0 条
查看
手机号线索 2 条
查看

域名线索

域名 查询域名 ip 地区 查询地区
httpdns.xiaopeng.com 47.102.46.115 China - Zhejiang
xmart-cdu-service-log.oss-cn-hangzhou.aliyuncs.com 124.160.145.0 China - Zhejiang
image.cnamedomain.com 没有ip信息 没有地区信息
oss-cn-hangzhou.aliyuncs.com 118.31.219.236 China - Zhejiang
10.0.13.28 10.0.13.28 - - -
cs-api-ext.xiaopeng.com 118.31.212.217 China - Zhejiang
mall.xiaopeng.com 218.61.164.212 China - Liaoning
fra-bd-callback.xiaopeng.com 8.220.70.172 Germany - Hessen
mpush-api.aliyun.com 106.11.248.144 China - Zhejiang
chargegateway.xiaopeng.com 118.31.212.217 China - Zhejiang
opn.baidu.com 111.206.209.207 China - Beijing
fra-callback-api.xiaopeng.com 8.220.70.172 Germany - Hessen
fra-xp-log.s3.eu-central-1.amazonaws.com 199.96.63.53 United States of America - California
json-schema.org 104.26.2.209 United States of America - California
iot-web.xiaopeng.com 175.17.20.208 China - Jilin
v-callback.xiaopeng.com 118.31.212.217 China - Zhejiang
xmart.deploy-test.xiaopeng.com 47.96.240.241 China - Zhejiang
xmart.test.mm.volkswagen-anhui.com 47.102.42.105 China - Zhejiang
oss.aliyuncs.com 118.178.29.5 China - Zhejiang
xmart-eu.xiaopeng.com 8.209.64.176 Germany - Hessen
oss-cn-.aliyuncs.comor 没有ip信息 没有地区信息
httpdns-extender-pre.xiaopeng.com 121.199.58.42 China - Zhejiang
speech.xiaopeng.com 101.37.181.14 China - Zhejiang
ur.xiaopeng.com 47.110.214.199 China - Zhejiang
speech-eu.xiaopeng.com 47.254.129.120 Germany - Hessen
xmart.xiaopeng.com 47.96.221.177 China - Zhejiang
127.0.0.1 127.0.0.1 - - -
cache.amap.com 124.95.175.53 China - Liaoning
schemas.android.com 没有ip信息 没有地区信息

URL线索

URL信息 Url所在文件
https://ip.
com/alibaba/sdk/android/oss/OSSImpl.java
http://oss-cn-****.aliyuncs.com',or
com/alibaba/sdk/android/oss/OSSImpl.java
http://image.cnamedomain.com'!
com/alibaba/sdk/android/oss/OSSImpl.java
http://oss-cn-hangzhou.aliyuncs.com
com/alibaba/sdk/android/oss/common/OSSConstants.java
http://oss.aliyuncs.com
com/alibaba/sdk/android/oss/internal/InternalRequestOperation.java
http://oss-cn-****.aliyuncs.com',or
com/alibaba/sdk/android/oss/internal/InternalRequestOperation.java
http://image.cnamedomain.com'!
com/alibaba/sdk/android/oss/internal/InternalRequestOperation.java
http://json-schema.org/draft-04/schema
com/alibaba/fastjson2/schema/JSONSchema.java
https://httpdns-extender-pre.xiaopeng.com/local
com/xiaopeng/lib/framework/netchannelmodule/http/xmart/DnsConstants.java
https://httpdns.xiaopeng.com/local
com/xiaopeng/lib/framework/netchannelmodule/http/xmart/DnsConstants.java
https://fra-xp-log.s3.eu-central-1.amazonaws.com
com/xiaopeng/lib/framework/netchannelmodule/remotestorage/aws/BaseAwsTask.java
https://fra-xp-log.s3.eu-central-1.amazonaws.com/
com/xiaopeng/lib/framework/netchannelmodule/remotestorage/aws/BaseAwsTask.java
https://fra-callback-api.xiaopeng.com/xmartFileData
com/xiaopeng/lib/framework/netchannelmodule/remotestorage/aws/SimpleAwsUploadTask.java
https://fra-bd-callback.xiaopeng.com/oss/xmartData/xmartOssFile
com/xiaopeng/lib/framework/netchannelmodule/remotestorage/aws/SimpleAwsUploadTask.java
https://xmart.deploy-test.xiaopeng.com
com/xiaopeng/lib/utils/config/EnvConfigHelper.java
http://xmart-cdu-service-log.oss-cn-hangzhou.aliyuncs.com/
com/xiaopeng/lib/utils/config/CommonConfig.java
http://oss-cn-hangzhou.aliyuncs.com/
com/xiaopeng/lib/utils/config/CommonConfig.java
https://xmart.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://xmart-eu.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://xmart.test.mm.volkswagen-anhui.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://10.0.13.28:8553
com/xiaopeng/lib/utils/config/CommonConfig.java
https://10.0.13.28:8556
com/xiaopeng/lib/utils/config/CommonConfig.java
https://speech.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://speech-eu.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://iot-web.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://chargegateway.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://mall.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://ur.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://fra-callback-api.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://cs-api-ext.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://v-callback.xiaopeng.com
com/xiaopeng/lib/utils/config/CommonConfig.java
https://cache.amap.com/h5/h5/publish/241/index.html?type=auto
com/xiaopeng/oobe/Constants.java
https://cache.amap.com/h5/h5/publish/238/index.html
com/xiaopeng/oobe/Constants.java
https://mpush-api.aliyun.com/v2.0/a/audid/req/
com/ta/a/b/h.java
http://schemas.android.com/apk/res/android
defpackage/s9.java
http://schemas.android.com/apk/res-auto
defpackage/xc0.java
https://opn.baidu.com/map/2025/yens?tpltype=1
defpackage/mv0.java
https://opn.baidu.com/map/2025/darkxieyi?tpltype=1
defpackage/mv0.java

邮箱线索

代码反编译

AndroidManifest配置 查看
Java源代码 查看 -- 下载

签名证书

APK已签名
v1 签名: True
v2 签名: True
v3 签名: True
找到 1 个唯一证书
主题: C=US, ST=California, L=Mountain View, O=Android, OU=Android, CN=Android, E=android@android.com
签名算法: rsassa_pkcs1v15
有效期自: 2008-04-15 22:40:50+00:00
有效期至: 2035-09-01 22:40:50+00:00
发行人: C=US, ST=California, L=Mountain View, O=Android, OU=Android, CN=Android, E=android@android.com
序列号: 0xb3998086d056cffa
哈希算法: md5
md5值: 8ddb342f2da5408402d7568af21e29f9
sha1值: 27196e386b875e76adf700e7ea84e4c6eee33dfa
sha256值: c8a2e9bccf597c2fb6dc66bee293fc13f2fc47ec77bc6b2b0d52c11f51192ab8
sha512值: 5d802f24d6ac76c708a8e7afe28fd97e038f888cef6665fb9b4a92234c311d6ff42127ccb2eb5a898f4e7e4e553f6ef602d43d1a2ebae9f002a6598e72fd2d83
公钥算法: rsa
密钥长度: 2048
指纹: 65ba0830722d5767f8779e37d0d9c67562f03ec63a2889af655ee9c59effb434

硬编码敏感信息

"authorization_cancel" : "暂不开启"
"authorization_ok" : "确认开启"
"voice_authorization_check" : "同意参加语音用户体验改进计划,详情可查阅"
"vui_authorization_content" : "推荐您开启“小P”智能语音服务,开启后“小P”将为您提供贴心、智能的语音对话服务。"
"vui_authorization_explain" : "· 您可通过下达语音指令来控制各类车上的功能,也可发起导航和播放音乐、查询天气等; · “小P+”智能唤醒:只需在指令前后加“小P”即可响应您的需求,如“小P帮我打开空调”; · 多音区交互:每个座位的乘客均可随时呼唤“小P”,支持全车全时连续对话交互; · 无网络对话:在地库、高速、隧道等网络不佳的环境下,依然可为您提供基础的语音服务。"
"vui_authorization_explain_xiao_p" : "· 您可通过下达语音指令来控制各类车上的功能,也可发起导航和播放音乐、查询天气等; · 多音区交互:每个座位的乘客均可随时呼唤“小P”; · 无网络对话:在地库、高速、隧道等网络不佳的环境下,依然可为您提供基础的语音服务。"
"vui_authorization_title" : "“小P”智能语音服务"
"vui_authorized_start_tts" : "为了提供更好的产品体验,推荐您开启小P智能语音服务"

加壳分析

第三方插件

危险动作

向手机申请的权限 是否危险 类型 详细情况