温馨提示：APP静态检测会有结果不完整的现象，如有疑问或建议， 可加入我们的微信群讨论
文件信息
文件名 litu_v1.0.2.apk文件大小 53.19MB
MD5值 3a08be1f0f1cec46a6d21cf389e5b1da
SHA1值 8a1f305e9b5adfad4ab7b6ecd69f55e38bfdd5d3
SHA256值 ac6dc76d3a54e891db95791b2971cfcf0c3542259c5429df3044ff79728826fe
APK信息
APK名称 理途旅游包名 com.litu.app
主活动 com.wesdk.ad.MainActivity
安卓版本名称 1.0.2
域名线索
| 域名 | 查询域名 | ip | 地区 | 查询地区 |
|---|---|---|---|---|
| crbug.com | 216.239.32.29 | United States of America - California | ||
| oss-cn-.aliyuncs.comor | 没有ip信息 | 没有地区信息 | ||
| www.samsungapps.com | 54.229.225.161 | Ireland - Dublin | ||
| m.sigmob.com | 39.106.48.234 | China - Zhejiang | ||
| adash.man.aliyuncs.com | 59.82.40.77 | China - Zhejiang | ||
| mobilegwpre.alipay.com | 110.75.138.35 | China - Zhejiang | ||
| api.yidianshangmai.com | 106.39.240.48 | China - Beijing | ||
| yuezuan.sljkj.com | 182.92.168.120 | China - Zhejiang | ||
| 39.97.27.64 | 39.97.27.64 | China - Zhejiang | ||
| analytics.rayjump.com | 182.92.120.219 | China - Zhejiang | ||
| yun.dui88.com | 125.76.247.237 | China - Shanxi | ||
| cdn-adn-https.rayjump.com | 42.81.147.71 | China - Tianjin | ||
| owads.audioadx.com | 8.136.116.120 | China - Zhejiang | ||
| mobilegw.alipay.com | 203.209.255.248 | China - Zhejiang | ||
| sf6-ttcdn-tos.pstatp.com | 61.147.216.109 | China - Jiangsu | ||
| tl.oneway.mobi | 47.98.30.91 | China - Zhejiang | ||
| union.baidu.com | 111.206.208.169 | China - Beijing | ||
| www.litutongz.com | 203.107.84.80 | China - Zhejiang | ||
| engine.tuirabbit.com | 47.111.36.14 | China - Zhejiang | ||
| update0.aiclk.com | 47.94.162.150 | China - Zhejiang | ||
| cloudauth-dualstack.aliyuncs.com | 140.205.61.35 | China - Zhejiang | ||
| 211.151.146.65 | 211.151.146.65 | China - Beijing | ||
| render.alipay.com | 36.102.211.249 | China - Zhejiang | ||
| adx.tuia-pre.cn | 114.55.193.22 | China - Zhejiang | ||
| activity.tuiapre.cn | 114.55.193.22 | China - Zhejiang | ||
| mgw.mpaas.cn-hangzhou.aliyuncs.com | 47.96.168.196 | China - Zhejiang | ||
| zk.fnmobi.com | 125.76.247.237 | China - Shanxi | ||
| i.snssdk.com | 220.181.135.138 | China - Beijing | ||
| test.com | 没有ip信息 | 没有地区信息 | ||
| google.github.io | 185.199.108.153 | United States of America - Pennsylvania | ||
| apps.oceanengine.com | 220.181.135.135 | China - Beijing | ||
| log.tbs.qq.com | 109.244.244.37 | China - Beijing | ||
| pop.yuncloudauth.com | 59.82.44.229 | China - Zhejiang | ||
| mqqad.html5.qq.com | 0.0.0.1 | - - - | ||
| testcloud.tgpa.qq.com | 101.91.22.88 | China - Shanghai | ||
| owtk.audioadx.com | 8.136.116.120 | China - Zhejiang | ||
| yun.duiba.com.cn | 42.81.21.215 | China - Tianjin | ||
| track.oway.mobi | 47.98.30.91 | China - Zhejiang | ||
| net.rayjump.com | 39.107.225.241 | China - Zhejiang | ||
| ouplog.umeng.com | 47.246.110.94 | Hong Kong - Hong Kong | ||
| v.behe.com | 没有ip信息 | 没有地区信息 | ||
| loggw-exsdk.alipay.com | 110.76.6.71 | China - Zhejiang | ||
| engine.tuiatest.cn | 120.55.74.102 | China - Zhejiang | ||
| cfg.imtt.qq.com | 175.27.12.246 | China - Beijing | ||
| engine.tuia.cn | 47.111.36.14 | China - Zhejiang | ||
| apps.samsung.com | 42.81.61.124 | China - Tianjin | ||
| mclient.alipay.com | 119.96.90.231 | China - Hubei | ||
| image.cnamedomain.com | 没有ip信息 | 没有地区信息 | ||
| 119.29.29.29 | 119.29.29.29 | Hong Kong - Hong Kong | ||
| check.rayjump.com | 59.110.124.183 | China - Zhejiang | ||
| verify.inkanke.net | 125.76.247.251 | China - Shanxi | ||
| api-ads.qutaovip.com | 120.79.78.32 | China - Zhejiang | ||
| 118.178.152.152 | 118.178.152.152 | China - Zhejiang | ||
| ns.adobe.com | 没有ip信息 | 没有地区信息 | ||
| adservice.sigmob.cn | 101.200.125.221 | China - Zhejiang | ||
| cloud.tgpa.qq.com | 101.89.41.145 | China - Shanghai | ||
| github.com | 20.205.243.166 | United States of America - Washington | ||
| mobilegw.alipaydev.com | 110.75.132.131 | China - Zhejiang | ||
| hybird.rayjump.com | 103.254.188.166 | China - Beijing | ||
| cdn.aiclk.com | 220.181.158.228 | China - Beijing | ||
| plbslog.umeng.com | 36.156.202.78 | China - Beijing | ||
| play.google.com | 142.251.42.238 | United States of America - California | ||
| ulogs.umengcloud.com | 223.109.148.141 | China - Beijing | ||
| nr.yunqingugm.com | 47.97.160.174 | China - Zhejiang | ||
| detect.rayjump.com | 52.22.98.2 | United States of America - Virginia | ||
| developer.umeng.com | 59.82.29.249 | China - Zhejiang | ||
| ads.oneway.mobi | 118.178.152.152 | China - Zhejiang | ||
| schemas.android.com | 没有ip信息 | 没有地区信息 | ||
| d1tru86qrby720.cloudfront.net | 13.32.54.36 | Japan - Tokyo | ||
| debugx5.qq.com | 175.27.9.46 | China - Beijing | ||
| engine.tuiapre.cn | 114.55.193.22 | China - Zhejiang | ||
| www.w3.org | 104.18.23.19 | United States of America - California | ||
| www.facebook.com | 199.96.58.15 | United States of America - California | ||
| alogsus.umeng.com | 223.109.148.176 | China - Beijing | ||
| utoken.umeng.com | 218.91.197.68 | China - Jiangsu | ||
| astat.bugly.qcloud.com | 150.109.27.253 | Singapore - Singapore | ||
| ip.adipman.net | 114.55.146.25 | China - Zhejiang | ||
| androidquery.appspot.com | 74.86.118.24 | United States of America - Texas | ||
| tl.oway.mobi | 118.178.152.152 | China - Zhejiang | ||
| astat.bugly.cros.wr.pvp.net | 170.106.135.32 | United States of America - California | ||
| ads.oway.mobi | 47.98.30.91 | China - Zhejiang | ||
| creative.bxsnews.com | 220.181.158.230 | China - Beijing | ||
| d.alipay.com | 203.209.245.74 | China - Zhejiang | ||
| logrcv.aiclk.com | 39.96.159.51 | China - Zhejiang | ||
| open.e.kuaishou.com | 103.102.200.30 | China - Beijing | ||
| alogus.umeng.com | 223.109.148.176 | China - Beijing | ||
| wappaygw.alipay.com | 119.96.90.230 | China - Hubei | ||
| adx.tuia.cn | 121.40.178.6 | China - Zhejiang | ||
| rp.ipadview.com | 121.40.56.194 | China - Zhejiang | ||
| graph.facebook.com | 103.252.115.49 | Singapore - Singapore | ||
| activity.tuiatest.cn | 120.55.74.102 | China - Zhejiang | ||
| lazy.rayjump.com | 59.110.124.183 | China - Zhejiang | ||
| tracelog-debug.aiclk.com | 47.94.0.122 | China - Zhejiang | ||
| open.weixin.qq.com | 175.24.209.30 | China - Beijing | ||
| activity.tuia.cn | 47.111.36.14 | China - Zhejiang | ||
| policy.rayjump.com | 59.110.124.183 | China - Zhejiang | ||
| 127.0.0.1 | 127.0.0.1 | - - - | ||
| px.ucweb.com | 106.8.139.144 | China - Hebei | ||
| pslog.umeng.com | 59.82.29.248 | China - Zhejiang | ||
| xad.wannuosili.com | 182.92.211.180 | China - Zhejiang | ||
| auth.yunverify.com | 59.82.44.229 | China - Zhejiang | ||
| whatwg.org | 165.227.248.76 | United States of America - New Jersey | ||
| jimu.tuia.cn | 120.26.53.4 | China - Zhejiang | ||
| errlogos.umeng.com | 47.246.110.18 | Hong Kong - Hong Kong | ||
| sdk.wannuosili.com | 101.200.235.208 | China - Zhejiang | ||
| fy.1sapp.com | 123.56.87.63 | China - Zhejiang | ||
| passport.kuaishou.com | 103.107.219.22 | China - Beijing | ||
| errlog.umeng.com | 223.109.148.143 | China - Beijing | ||
| boardy.huanqiu.com | 220.181.135.135 | China - Beijing | ||
| h5.m.taobao.com | 111.225.210.166 | China - Hebei | ||
| cloudauth-dualstack.cn-beijing.aliyuncs.com | 39.97.154.5 | China - Zhejiang | ||
| usr-api.1sapp.com | 123.56.87.63 | China - Zhejiang | ||
| android.asset | 没有ip信息 | 没有地区信息 | ||
| tbsrecovery.imtt.qq.com | 109.244.244.237 | China - Beijing | ||
| cloudauth.cn-beijing.aliyuncs.com | 39.97.154.5 | China - Zhejiang | ||
| soft.tbs.imtt.qq.com | 119.167.147.86 | China - Shandong | ||
| schemas.microsoft.com | 13.107.226.49 | United States of America - Washington | ||
| cpro.baidustatic.com | 124.238.241.35 | China - Hebei | ||
| debugtbs.qq.com | 175.27.9.46 | China - Beijing | ||
| static.yky.qq.com | 221.204.43.71 | China - Shanxi | ||
| test.api.yky.qq.com | 183.47.102.215 | China - Guangdong | ||
| static.yximgs.com | 211.93.211.105 | China - Beijing | ||
| dc.sigmob.cn | 112.126.7.24 | China - Zhejiang | ||
| gist.github.com | 159.24.3.173 | United States of America - North Carolina | ||
| px-intl.ucweb.com | 157.185.188.1 | United States of America - California | ||
| tools.ibookeee.com | 47.114.95.98 | China - Zhejiang | ||
| api.yky.qq.com | 109.244.172.228 | China - Beijing | ||
| ulogs.umeng.com | 223.109.148.177 | China - Beijing | ||
| 10.0.0.187 | 10.0.0.187 | - - - | ||
| api.twitter.com | 104.244.42.130 | United States of America - California | ||
| hapjs.org | 140.179.146.114 | China - Beijing | ||
| android.bugly.qq.com | 109.244.244.35 | China - Beijing | ||
| js-ad.a.yximgs.com | 42.81.245.1 | China - Tianjin | ||
| adx.tuiatest.cn | 120.55.74.102 | China - Zhejiang | ||
| www.yunqingugm.com | 47.93.1.251 | China - Zhejiang | ||
| pms.mb.qq.com | 175.27.12.246 | China - Beijing | ||
| xml.apache.org | 151.101.2.132 | United States of America - California | ||
| api.htp.ad-scope.com.cn | 123.57.16.151 | China - Zhejiang | ||
| sv.adintl.cn | 139.224.38.36 | China - Zhejiang | ||
| mdc.html5.qq.com | 175.27.9.46 | China - Beijing | ||
| cloudauth.aliyuncs.com | 140.205.174.3 | China - Zhejiang | ||
| configure.rayjump.com | 59.110.124.183 | China - Zhejiang | ||
| oss.aliyuncs.com | 118.178.29.5 | China - Zhejiang | ||
| www.baidu.com | 110.242.68.4 | China - Hebei | ||
| ip.taobao.com | 203.119.169.240 | China - Beijing | ||
| static.yunqingugm.com | 没有ip信息 | 没有地区信息 | ||
| long.open.weixin.qq.com | 109.244.216.15 | China - Beijing | ||
| oss-cn-hangzhou.aliyuncs.com | 118.31.219.248 | China - Zhejiang | ||
| jsengine.api.fnmobi.com | 106.39.240.39 | China - Beijing | ||
| api.weixin.qq.com | 175.27.5.221 | China - Beijing | ||
| qfc.innotechx.com | 123.56.87.63 | China - Zhejiang | ||
| zkdemo.fnmobi.com | 8.129.189.132 | China - Zhejiang | ||
| mcgw.alipay.com | 119.96.90.231 | China - Hubei |
URL线索
邮箱线索
| 邮箱地址 | 所在文件 |
|---|---|
|
danikula@gmail.com |
com/mediamain/android/adx/preload/cache/HttpUrlSource.java |
|
danikula@gmail.com |
com/fnmobi/sdk/library/b3.java |
|
danikula@gmail.com |
com/sigmob/sdk/videocache/j.java |
|
.apk@classes.dex |
com/kuaishou/weapon/p0/ac.java |
|
danikula@gmail.com |
com/kwad/sdk/core/videocache/h.java |
|
danikula@gmail.com |
com/tencent/klevin/e/j/d.java |
|
xxx@email.elided |
aegon/chrome/base/PiiElider.java |
手机线索
| 手机号 | 所在文件 |
|---|---|
|
17179869184 |
com/kwai/video/player/KsMediaMeta.java |
签名证书
APK已签名
v1 签名: True
v2 签名: True
v3 签名: False
找到 1 个唯一证书
主题: C=CN, ST=, L=, O=Android, OU=Android, CN=lrM7DbEQVtFRk9PFp%2B35jmGdKN0bLokPJ%2FZSXcHCQSJPIj4BGoZss7xzYgLD5KM44PA3ffc5sznzjqxtlquEHg%3D%3D
签名算法: rsassa_pkcs1v15
有效期自: 2023-04-06 09:56:07+00:00
有效期至: 2123-03-13 09:56:07+00:00
发行人: C=CN, ST=, L=, O=Android, OU=Android, CN=lrM7DbEQVtFRk9PFp%2B35jmGdKN0bLokPJ%2FZSXcHCQSJPIj4BGoZss7xzYgLD5KM44PA3ffc5sznzjqxtlquEHg%3D%3D
序列号: 0x4c90d3cd
哈希算法: sha256
md5值: 07256bd339e3ce7aa38be995cfc34d6a
sha1值: 94c445902eb66048163feb42086c2ba9bf61a10e
sha256值: bac013007b5c50694bc95bf692bd2b3f37cac63d487109aff3ceb95a5abc062b
sha512值: 7ad431e81b94fecb15f9c4701d93d04ba0569bbe0a640f41d55862fe79ae1f1cf4cef09b09eed9089e8e45e90e5644305a466250e586fbdb1caa1e352e114d40
公钥算法: rsa
密钥长度: 2048
指纹: d47b89cb17ef13f5f28de2038e0bfef4103fbd6163ee0085e6e82275beb472e2硬编码敏感信息
"ksad_ad_default_author" : "@可爱的广告君创造的原声"
"ksad_ad_default_username" : "@可爱的广告君"
加壳分析
第三方插件
危险动作
| 向手机申请的权限 | 是否危险 | 类型 | 详细情况 |
|---|---|---|---|
| android.permission.INTERNET | 正常 | 互联网接入 | 允许应用程序创建网络套接字 |
| android.permission.ACCESS_NETWORK_STATE | 正常 | 查看网络状态 | 允许应用程序查看所有网络的状态 |
| android.permission.ACCESS_WIFI_STATE | 正常 | 查看Wi-Fi状态 | 允许应用程序查看有关 Wi-Fi 状态的信息 |
| android.permission.CHANGE_WIFI_STATE | 正常 | 更改Wi-Fi状态 | 允许应用程序连接和断开 Wi-Fi 接入点,并对配置的 Wi-Fi 网络进行更改 |
| android.permission.READ_PHONE_STATE | 危险 | 读取电话状态和身份 | 允许应用访问设备的电话功能。具有此权限的应用程序可以确定此电话的电话号码和序列号,呼叫是否处于活动状态,呼叫所连接的号码等 |
| android.permission.ACCESS_COARSE_LOCATION | 危险 | 粗定位 | 访问粗略位置源,例如移动网络数据库,以确定大概的电话位置（如果可用）。恶意应用程序可以使用它来确定您的大致位置 |
| android.permission.ACCESS_FINE_LOCATION | 危险 | 精细定位（GPS） | 访问精细位置源,例如手机上的全球定位系统,如果可用。恶意应用程序可以使用它来确定您的位置,并可能消耗额外的电池电量 |
| android.permission.READ_EXTERNAL_STORAGE | 危险 | 读取外部存储器内容 | 允许应用程序从外部存储读取 |
| android.permission.WRITE_EXTERNAL_STORAGE | 危险 | 读取/修改/删除外部存储内容 | 允许应用程序写入外部存储 |
| android.permission.SYSTEM_ALERT_WINDOW | 危险 | 显示系统级警报 | 允许应用程序显示系统警报窗口。恶意应用程序可以接管手机的整个屏幕 |
| android.permission.REQUEST_INSTALL_PACKAGES | 危险 | 允许应用程序请求安装包。 | 恶意应用程序可以利用它来尝试诱骗用户安装其他恶意软件包。 |
| android.permission.GET_TASKS | 危险 | 检索正在运行的应用程序 | 允许应用程序检索有关当前和最近运行的任务的信息。可能允许恶意应用程序发现有关其他应用程序的私人信息 |
| android.permission.WAKE_LOCK | 正常 | 防止手机睡眠 | 允许应用程序防止手机进入睡眠状态 |
| android.permission.REQUEST_DELETE_PACKAGES | 正常 | 允许应用程序请求删除包 | |
| android.permission.CAMERA | 危险 | 拍照和录像 | 允许应用程序用相机拍照和录像。这允许应用程序收集相机随时看到的图像 |
| android.permission.WRITE_SETTINGS | 危险 | 修改全局系统设置 | 允许应用程序修改系统设定数据。恶意应用可能会损坏你的系统的配置。 |
| android.permission.CALL_PHONE | 危险 | 直接拨打电话号码 | 允许应用程序在没有您干预的情况下拨打电话号码。恶意应用程序可能会导致您的电话账单出现意外呼叫。请注意,这不允许应用程序拨打紧急电话号码 |
| com.asus.msa.SupplementaryDID.ACCESS | 未知 | 调用了未知的操作 | |
| freemme.permission.msa | 未知 | 调用了未知的操作 | |
| android.permission.BLUETOOTH | 正常 | 创建蓝牙连接 | 允许应用程序连接到配对的蓝牙设备 |
| android.permission.WRITE_CONTACTS | 危险 | 写入联系人数据 | 允许应用程序修改您手机上存储的联系人（地址）数据。恶意应用程序可以使用它来删除或修改您的联系人数据 |
| android.permission.QUERY_ALL_PACKAGES | 正常 | 允许查询设备上的任何普通应用程序,无论清单声明如何 | |
| android.permission.RECORD_AUDIO | 危险 | 录音 | 允许应用程序访问音频记录路径 |
| android.permission.FOREGROUND_SERVICE | 正常 | 允许常规应用程序使用 Service.startForeground。 | |
| android.permission.KILL_BACKGROUND_PROCESSES | 正常 | 杀死后台进程 | 允许应用程序杀死其他应用程序的后台进程,即使内存不低 |
| android.permission.RECEIVE_BOOT_COMPLETED | 正常 | 开机时自动启动 | 允许应用程序在系统完成启动后立即启动。这可能会使启动手机需要更长的时间,并允许应用程序通过始终运行来减慢整个手机的速度 |
| android.permission-group.CAMERA | 危险 | 拍照和录像 | 允许应用程序用相机拍照和录像。这允许应用程序收集相机随时看到的图像 |
| android.permission.FLASHLIGHT | 正常 | 控制手电筒 | 允许应用程序控制手电筒 |
| android.permission.VIBRATE | 正常 | 可控震源 | 允许应用程序控制振动器 |
| android.permission.INSTALL_PACKAGES | 系统需要 | 直接安装应用程序 | 允许应用程序安装新的或更新的 Android 包。恶意应用程序可以使用它来添加具有任意强大权限的新应用程序 |
| android.permission.BLUETOOTH_ADMIN | 正常 | 蓝牙管理 | 允许应用程序发现和配对蓝牙设备。 |
| android.permission.MODIFY_PHONE_STATE | 系统需要 | 修改电话状态 | 允许应用程序控制设备的电话功能。具有此权限的应用程序可以切换网络,打开和关闭电话收音机等,而无需通知您 |
| android.permission.SEND_SMS | 危险 | 发送短信 | 允许应用程序发送 SMS 消息。恶意应用程序可能会在未经您确认的情况下发送消息,从而使您付出代价 |
| android.permission.READ_SMS | 危险 | 阅读短信或彩信 | 允许应用程序读取存储在您的手机或 SIM 卡上的 SMS 消息。恶意应用程序可能会读取您的机密信息 |
| android.permission.READ_CONTACTS | 危险 | 读取联系人数据 | 允许应用程序读取您手机上存储的所有联系人（地址）数据。恶意应用程序可以借此将您的数据发送给其他人 |
| com.litu.app.permission.KW_SDK_BROADCAST | 未知 | 调用了未知的操作 | |
| android.permissio.WRITE_EXTERNAL_STORAGE | 危险 | 读取/修改/删除外部存储内容 | 允许应用程序写入外部存储 |
| android.permission.CHANGE_NETWORK_STATE | 正常 | 更改网络连接 | 允许应用程序更改网络连接状态。 |
| android.permission.REORDER_TASKS | 正常 | 重新排序正在运行的应用程序 | 允许应用程序将任务移动到前台和后台。恶意应用程序可以在不受您控制的情况下将自己强加于前 |
| android.permission.SET_WALLPAPER | 正常 | 设置壁纸 | 允许应用程序设置系统壁纸 |
| com.litu.app.openadsdk.permission.TT_PANGOLIN | 未知 | 调用了未知的操作 | |
| android.permission.ACCESS_COARSE_UPDATES | 未知 | 调用了未知的操作 |